Current ultra-low power smart sensing edge devices, operating for years on small batteries,
are limited to low-bandwidth sensors, such as temperature or pressure. Enabling the next …

Java deserialization vulnerability is a severe threat in practice. Researchers have proposed
static analysis solutions to locate candidate vulnerabilities and fuzzing solutions to generate …

Automatic bug fixing has become a promising direction for reducing manual effort in
debugging. However, general approaches to automatic bug fixing may face some …

There is more than a decade-long history of using static analysis to find bugs in systems
such as Linux. Most of the existing static analyses developed for these systems are simple …

WebAssembly is a new W3C standard, providing a portable target for compilation for various
languages. All major browsers can run WebAssembly programs, and its use extends beyond …

Context-free language reachability (CFL-reachability) is a fundamental framework for
program analysis. A large variety of static analyses can be formulated as CFL-reachability …

A fundamental algorithmic problem at the heart of static analysis is Dyck reachability. The
input is a graph where the edges are labeled with different types of opening and closing …

Despite the advancement in software build tools such as Maven and Gradle, human
involvement is still often required in software building. To enable large-scale advanced …

Continuous Integration (CI) is a widely used development practice where developers
integrate their work after submitting code changes at central repository. CI servers usually …

Many program-analysis problems can be formulated as graph-reachability problems.
Interleaved Dyck language reachability (InterDyck-reachability) is a fundamental framework …