A survey on string constraint solving

R Amadini - ACM Computing Surveys (CSUR), 2021 - dl.acm.org
String constraint solving refers to solving combinatorial problems involving constraints over
string variables. String solving approaches have become popular over the past few years …

Static analysis for discovering IoT vulnerabilities

P Ferrara, AK Mandal, A Cortesi, F Spoto - International Journal on …, 2021 - Springer
Abstract The Open Web Application Security Project (OWASP), released the “OWASP Top
10 Internet of Things 2018” list of the high-priority security vulnerabilities for IoT systems. The …

A hierarchical and abstraction-based blockchain model

S Sahoo, AM Fajge, R Halder, A Cortesi - Applied Sciences, 2019 - mdpi.com
In the nine years since its launch, amid intense research, scalability is always a serious
concern in blockchain, especially in case of large-scale network generating huge number of …

Static analysis for dummies: experiencing LiSA

P Ferrara, L Negrini, V Arceri, A Cortesi - … Workshop on the State Of the …, 2021 - dl.acm.org
Semantics-based static analysis requires a significant theoretical background before being
able to design and implement a new analysis. Unfortunately, the development of even a toy …

LiSA: A generic framework for multilanguage static analysis

L Negrini, P Ferrara, V Arceri, A Cortesi - Challenges of Software …, 2023 - Springer
Modern software engineering revolves around distributed applications. From IoT networks to
client-server infrastructures, the application code is increasingly being divided into separate …

Automating ROS2 Security Policies Extraction through Static Analysis

G Zanatta, G Caiazza, P Ferrara… - 2024 IEEE/RSJ …, 2024 - ieeexplore.ieee.org
Cybersecurity in mission-critical robotic applications is a necessity to scale deployments
securely. ROS2 builds upon DDS-Security specs in ROS Client Library (RCL) to implement …

Combining string abstract domains for JavaScript analysis: An evaluation

R Amadini, A Jordan, G Gange, F Gauthier… - … 2017, Held as Part of the …, 2017 - Springer
Strings play a central role in JavaScript and similar scripting languages. Owing to dynamic
features such as the eval function and dynamic property access, precise string analysis is a …

Relational string abstract domains

V Arceri, M Olliaro, A Cortesi, P Ferrara - International Conference on …, 2022 - Springer
In modern programming languages, more and more functionalities, such as reflection and
data interchange, rely on string values. String analysis statically computes the set of string …

Cross-program taint analysis for IoT systems

A Mandal, P Ferrara, Y Khlyebnikov, A Cortesi… - Proceedings of the 35th …, 2020 - dl.acm.org
Cross-program propagation of tainted data (such as sensitive information or user input) in an
interactive IoT system is listed among the OWASP IoT top 10 most critical security risks …

Abstract interpretation, symbolic execution and constraints

R Amadini, G Gange, P Schachte… - … Developments in the …, 2020 - drops.dagstuhl.de
Abstract interpretation is a static analysis framework for sound over-approximation of all
possible runtime states of a program. Symbolic execution is a framework for reachability …