Extended Berkeley Packet Filter (eBPF) is a Linux subsystem that allows safely executing
untrusted user-defined extensions inside the kernel. It relies on static analysis to protect the …

Numerical abstract domains are an important ingredient of modern static analyzers used for
verifying critical program properties (eg, absence of buffer overflow or memory safety) …

In the last decades, numerous program analyzers have been developed both in academia
and industry. Despite their abundance however, there is currently no systematic way of …

Numerical abstract domains are a key component of modern static analyzers. Despite recent
advances, precise analysis with highly expressive domains remains too costly for many real …

Numerical abstract domains such as Polyhedra, Octahedron, Octagon, Interval, and others
are an essential component of static program analysis. The choice of domain offers a …

We show how to leverage reinforcement learning (RL) in order to speed up static program
analysis. The key insight is to establish a correspondence between concepts in RL and …

Zones and Octagons are popular abstract domains for static program analysis. They enable
the automated discovery of simple numerical relations that hold between pairs of program …

This paper describes a new program simplification technique called program trimming that
aims to improve the scalability and precision of safety checking tools. Given a program P …

Relational object invariants (or representation invariants) are relational properties held by
the fields of a (memory) object throughout its lifetime. For example, the length of a buffer …

The octagon abstract domain is a widely used numeric abstract domain expressing
relational information between variables whilst being both computationally efficient and …