The automated and semi-automated analysis of source code has remained a topic of
intense research for more than thirty years. During this period, algorithms and techniques for …

The first steps in analyzing defensive malware are understanding what obfuscations are
present in real-world malware binaries, how these obfuscations hinder analysis, and how …

Reverse engineering of software is the process of recovering higher-level structure and
meaning from a lower-level program representation. It can be used for legitimate purposes …

Understanding the behaviors of a software system is very important for performing daily
system maintenance tasks. In practice, one way to gain knowledge about the runtime …

This paper proposes a comprehensive set of techniques which limit the scope of remote
code injection attacks. These techniques prevent any injected code from making system …

Given a program and two variables p and q, the goal of points-to analysis is to check if p can
point to q in some execution of the program. This well-studied problem plays a crucial role in …

We are concerned with the problem of statically certifying (verifying) whether the client of a
software component conforms to the component's constraints for correct usage. We show …

Compiler optimizations discover facts about program behavior by querying static analysis.
However, developing or extending precise analysis is difficult. Some prior works implement …

We consider the problem of typestate verification for shallow programs; ie, programs where
pointers from program variables to heap-allocated objects are allowed, but where heap …

Aggressive compiler optimizations are formulated around the Program Dependence Graph
(PDG). Many techniques, including loop fission and parallelization are concerned primarily …