While static analysis is instrumental in uncovering software bugs, its precision in analyzing
large and intricate codebases remains challenging. The emerging prowess of Large …

Formal verification provides a rigorous and systematic approach to ensure the correctness
and reliability of software systems. Yet, constructing specifications for the full proof relies on …

Static analysis is a widely used technique in software engineering for identifying and
mitigating bugs. However, a significant hurdle lies in achieving a delicate balance between …

Recent advances of Large Language Models (LLMs), eg, ChatGPT, exhibited strong
capabilities of comprehending and responding to questions across a variety of domains …

Static analysis tools for capturing bugs and vulnerabilities in software programs are widely
employed in practice, as they have the unique advantages of high coverage and …

Fuzz testing operating system kernels has been effective overall in recent years. For
example, syzkaller manages to find thousands of bugs in the Linux kernel since 2017. One …

Global variables in the Linux kernel have been a common target of memory corruption
attacks to achieve privilege escalation. Several potential defense mechanisms can be …

Random-based approaches and heuristics are commonly used in kernel concurrency
testing due to the massive scale of modern kernels and corresponding interleaving space …

Operating system (OS) is the cornerstone for modern computer systems. It manages devices
and provides fundamental service for user-level applications. Thus, detecting bugs in OSes …

Indirect calls, while facilitating dynamic execution characteristics in C and C++ programs,
impose challenges on precise construction of the control-flow graphs (CFG). This hinders …