Attack surface reduction through the removal of unnecessary application features and code
is a promising technique for improving security without incurring any additional overhead …

After more than twenty-five years of research, memory safety violations remain one of the
major causes of security vulnerabilities in real-world software. Memory-safe languages, like …

Reduction to satisfiability of constrained Horn clauses (CHCs) is a widely studied approach
to automated program verification. Current CHC-based methods, however, do not work very …

Inferring aliasing and buffer-size information is important to understanding a C program's
memory layout, which is critical to program analysis and security-related tasks. However …

Cryptographic tools like proof systems, multi-party computation, and fully homomorphic
encryption are usually applied to computations expressed as systems of arithmetic …

LLVM miscompiles certain programs in C, C++, and Rust that use low-level language
features such as raw pointers in Rust or conversion between integers and pointers in C or …

Pointer analysis is indispensable for effectively verifying heap-manipulating programs. Even
though it has been studied extensively, there are no publicly available pointer analyses that …

Static analysis of low-level programs (C or LLVM) requires modeling memory. To strike a
good balance between precision and performance, most static analyzers rely on the C …

The goal of the DARPA Automated Rapid Certification Of Software (ARCOS) program is to"
automate the evaluation of software assurance evidence to enable certifiers to determine …

Several automatic verification tools have been recently developed to verify subsets of
LLVM's optimizations. However, none of these tools has robust support to verify memory …