Static single assignment (SSA) form is a popular intermediate representation that helps
implement useful static analyses, including global value numbering (GVN), sparse dataflow …

This chapter provides an overview of the Eva plug-in of Frama-C, a static analyzer based on
abstract interpretation, intended to automatically prove the absence of runtime errors in …

This document is a reference manual for the E-ACSL implementation provided by the E-
ACSL plugin [11] of the Frama-C framework [7], version 30.0 (Zinc). E-ACSL is an acronym …

This paper is a tutorial introduction to Frama-C, a framework for analysis and verification of C
programs. We present value analysis, deductive verification and runtime verification of …

Embedded systems are everywhere in society, and in many industries, such as the
automotive industry, embedded systems are safety-critical. Embedded systems are today …

This is a report on teaching formal methods in the form of program verification for Master
students in an applied computer science setting. The course was taught fully online, using …

We present a novel static analysis for thread-modular data race detection. Our approach
exploits static analysis of sequential program behaviour whose results are generalised for …

Subclasses of linear inequalities where each inequality has at most two variables are
popular in abstract interpretation and model checking, because they strike a balance …

Embedded systems are more and more connected to a variety of networks, which increases
their attack surface. At the same time, more and more objects are augmented with …

The Octagon domain, which tracks a restricted class of two-variable inequalities, is the
abstract domain of choice for many applications because its domain operations are either …