Unlike coverage-based fuzzing that gives equal attention to every part of a code, directed
fuzzing aims to direct a fuzzer to a specific target in the code, eg, the code with potential …

Characterization of bugs and attack vectors is in many practical scenarios as important as
their finding. Recently, Girol et. al. have introduced the concept of robust reachability, which …

We study transformational program logics for correctness and incorrectness that we extend
to explicitly handle both termination and nontermination. We show that the logics are …

In this work, we present a novel approach based on recent advances in software model
checking to synthesize ranking functions and prove termination (and non-termination) of …

Abstract Alternating Time Temporal Logic (ATL) is widely used for the verification of multi-
agent systems. We consider Resource Agent Logic (RAL), which extends ATL to allow the …

The overall aim of this thesis is the development of mathematically sound and practically
efficient methods for automatically proving the correctness of computer software. More …

We propose an abstract-interpretation-based analysis for recurrent sets. A recurrent set is a
set of states from which the execution of a program cannot or might not (as in our case) …

We study transformational program logics for correctness and incorrectness that we extend
to explicitly handle both termination and nontermination. We show that the logics are …

Given a behavior of interest in the program, statically determining the corresponding
responsible entity is a task of critical importance, especially in program security. Classical …

We present new static analysis methods for proving liveness properties of programs. In
particular, with reference to the hierarchy of temporal properties proposed by Manna and …