Sound malware analysis of Android applications is challenging. First, object-oriented
programs exhibit highly interprocedural, dynamically dispatched control structure. Second …

The polyvariance of a static analysis is the degree to which it structurally differentiates
approximations of program values. Polyvariant techniques come in a number of different …

Early work in implicit information flow detection applied only to flat, procedureless languages
with structured control-flow (eg, if statements, while loops). These techniques have yet to be …

Event-driven programs consist of event listeners that can be registered dynamically with
different types of events. The order in which these events are triggered is, however …

Web applications written in JavaScript are regularly used for dealing with sensitive or
personal data. Consequently, reasoning about their security properties has become an …

In higher order settings, control-flow analysis aims to model the propagation of both data
and control by finitely approximating program behaviors across all possible executions. The …

Early work in implicit information flow detection applied only to flat, procedureless languages
with structured control-flow (eg, if statements, while loops). These techniques have yet to be …

We previously presented a theory of analysis for expressive low-level languages that is
capable of proving non-interference for expressive languages. We now provide an …

The potential damage injection attacks or information leakage can inflict to an organization
is huge. It is therefore important to recognize vulnerabilities in software that can make these …

Today's smartphones house private and confidential data ubiquitously. Mobile apps running
on the devices can leak sensitive information by accident or intentionally. To understand …