Fast polyhedra abstract domain
Numerical abstract domains are an important ingredient of modern static analyzers used for
verifying critical program properties (eg, absence of buffer overflow or memory safety) …
verifying critical program properties (eg, absence of buffer overflow or memory safety) …
Simple and precise static analysis of untrusted linux kernel extensions
Extended Berkeley Packet Filter (eBPF) is a Linux subsystem that allows safely executing
untrusted user-defined extensions inside the kernel. It relies on static analysis to protect the …
untrusted user-defined extensions inside the kernel. It relies on static analysis to protect the …
A practical construction for decomposing numerical abstract domains
Numerical abstract domains such as Polyhedra, Octahedron, Octagon, Interval, and others
are an essential component of static program analysis. The choice of domain offers a …
are an essential component of static program analysis. The choice of domain offers a …
Fast numerical program analysis with reinforcement learning
We show how to leverage reinforcement learning (RL) in order to speed up static program
analysis. The key insight is to establish a correspondence between concepts in RL and …
analysis. The key insight is to establish a correspondence between concepts in RL and …
Learning fast and precise numerical analysis
Numerical abstract domains are a key component of modern static analyzers. Despite recent
advances, precise analysis with highly expressive domains remains too costly for many real …
advances, precise analysis with highly expressive domains remains too costly for many real …
Differentially testing soundness and precision of program analyzers
C Klinger, M Christakis, V Wüstholz - Proceedings of the 28th ACM …, 2019 - dl.acm.org
In the last decades, numerous program analyzers have been developed both in academia
and industry. Despite their abundance however, there is currently no systematic way of …
and industry. Despite their abundance however, there is currently no systematic way of …
A fresh look at zones and octagons
Zones and Octagons are popular abstract domains for static program analysis. They enable
the automated discovery of simple numerical relations that hold between pairs of program …
the automated discovery of simple numerical relations that hold between pairs of program …
Failure-directed program trimming
This paper describes a new program simplification technique called program trimming that
aims to improve the scalability and precision of safety checking tools. Given a program P …
aims to improve the scalability and precision of safety checking tools. Given a program P …
Incrementally closing octagons
A Chawdhary, E Robbins, A King - Formal Methods in System Design, 2019 - Springer
The octagon abstract domain is a widely used numeric abstract domain expressing
relational information between variables whilst being both computationally efficient and …
relational information between variables whilst being both computationally efficient and …
Identifying minimal changes in the zone abstract domain
Verification techniques express program states as logical formulas over program variables.
For example, symbolic execution and abstract interpretation encode program states as a set …
For example, symbolic execution and abstract interpretation encode program states as a set …