Static Detection of Security Vulnerabilities in Scripting Languages.
We present a static analysis algorithm for detecting security vulnerabilities in PHP, a popular
server-side scripting language for building web applications. Our analysis employs a novel …
server-side scripting language for building web applications. Our analysis employs a novel …
XDuce: A statically typed XML processing language
XDuce is a statically typed programming language for XML processing. Its basic data values
are XML documents, and its types (so-called regular expression types) directly correspond …
are XML documents, and its types (so-called regular expression types) directly correspond …
A compiled implementation of strong reduction
B Grégoire, X Leroy - Proceedings of the seventh ACM SIGPLAN …, 2002 - dl.acm.org
Motivated by applications to proof assistants based on dependent types, we develop and
prove correct a strong reducer and ß-equivalence checker for the λ-calculus with products …
prove correct a strong reducer and ß-equivalence checker for the λ-calculus with products …
Scalable error detection using boolean satisfiability
We describe a software error-detection tool that exploits recent advances in boolean
satisfiability (SAT) solvers. Our analysis is path sensitive, precise down to the bit level, and …
satisfiability (SAT) solvers. Our analysis is path sensitive, precise down to the bit level, and …
A framework for numeric analysis of array operations
Automatic discovery of relationships among values of array elements is a challenging
problem due to the unbounded nature of arrays. We present a framework for analyzing array …
problem due to the unbounded nature of arrays. We present a framework for analyzing array …
Regular expression types for XML
We propose regular expression types as a foundation for XML processing languages.
Regular expression types are a natural generalization of Document Type Definitions (DTDs) …
Regular expression types are a natural generalization of Document Type Definitions (DTDs) …
A modular module system
X Leroy - Journal of Functional Programming, 2000 - cambridge.org
A simple implementation of an SML-like module system is presented as a module
parameterized by a base language and its type-checker. This implementation is useful both …
parameterized by a base language and its type-checker. This implementation is useful both …
Objective ML: An effective object‐oriented extension to ML
D Rémy, J Vouillon - Theory and practice of object systems, 1998 - Wiley Online Library
Objective ML is a small practical extension to ML with objects and top level classes. It is fully
compatible with ML; its type system is based on ML polymorphism, record types with …
compatible with ML; its type system is based on ML polymorphism, record types with …
Regular expression pattern matching for XML
We propose regular expression pattern matching as a core feature for programming
languages for manipulating XML (and similar tree-structured data formats). We extend …
languages for manipulating XML (and similar tree-structured data formats). We extend …
Automated generation of search tree algorithms for hard graph modification problems
J Gramm, J Guo, F Hüffner, R Niedermeier - Algorithmica, 2004 - Springer
We present a framework for an automated generation of exact search tree algorithms for NP-
hard problems. The purpose of our approach is twofold—rapid development and improved …
hard problems. The purpose of our approach is twofold—rapid development and improved …