A survey on string constraint solving
R Amadini - ACM Computing Surveys (CSUR), 2021 - dl.acm.org
String constraint solving refers to solving combinatorial problems involving constraints over
string variables. String solving approaches have become popular over the past few years …
string variables. String solving approaches have become popular over the past few years …
Static analysis for discovering IoT vulnerabilities
Abstract The Open Web Application Security Project (OWASP), released the “OWASP Top
10 Internet of Things 2018” list of the high-priority security vulnerabilities for IoT systems. The …
10 Internet of Things 2018” list of the high-priority security vulnerabilities for IoT systems. The …
A hierarchical and abstraction-based blockchain model
In the nine years since its launch, amid intense research, scalability is always a serious
concern in blockchain, especially in case of large-scale network generating huge number of …
concern in blockchain, especially in case of large-scale network generating huge number of …
Static analysis for dummies: experiencing LiSA
Semantics-based static analysis requires a significant theoretical background before being
able to design and implement a new analysis. Unfortunately, the development of even a toy …
able to design and implement a new analysis. Unfortunately, the development of even a toy …
LiSA: A generic framework for multilanguage static analysis
Modern software engineering revolves around distributed applications. From IoT networks to
client-server infrastructures, the application code is increasingly being divided into separate …
client-server infrastructures, the application code is increasingly being divided into separate …
Automating ROS2 Security Policies Extraction through Static Analysis
Cybersecurity in mission-critical robotic applications is a necessity to scale deployments
securely. ROS2 builds upon DDS-Security specs in ROS Client Library (RCL) to implement …
securely. ROS2 builds upon DDS-Security specs in ROS Client Library (RCL) to implement …
Combining string abstract domains for JavaScript analysis: An evaluation
Strings play a central role in JavaScript and similar scripting languages. Owing to dynamic
features such as the eval function and dynamic property access, precise string analysis is a …
features such as the eval function and dynamic property access, precise string analysis is a …
Relational string abstract domains
In modern programming languages, more and more functionalities, such as reflection and
data interchange, rely on string values. String analysis statically computes the set of string …
data interchange, rely on string values. String analysis statically computes the set of string …
Cross-program taint analysis for IoT systems
Cross-program propagation of tainted data (such as sensitive information or user input) in an
interactive IoT system is listed among the OWASP IoT top 10 most critical security risks …
interactive IoT system is listed among the OWASP IoT top 10 most critical security risks …
Abstract interpretation, symbolic execution and constraints
Abstract interpretation is a static analysis framework for sound over-approximation of all
possible runtime states of a program. Symbolic execution is a framework for reachability …
possible runtime states of a program. Symbolic execution is a framework for reachability …