Fast and precise sanitizer analysis with {BEK}

P Hooimeijer, B Livshits, D Molnar, P Saxena… - 20th USENIX Security …, 2011 - usenix.org
Web applications often use special string-manipulating sanitizers on untrusted user data, but
it is difficult to reason manually about the behavior of these functions, leading to errors. For …

Symbolic finite state transducers: Algorithms and applications

M Veanes, P Hooimeijer, B Livshits, D Molnar… - Proceedings of the 39th …, 2012 - dl.acm.org
Finite automata and finite transducers are used in a wide range of applications in software
engineering, from regular expressions to specification languages. We extend these classic …

Expressiveness of streaming string transducers

R Alur, P Černý - IARCS Annual Conference on Foundations of …, 2010 - drops.dagstuhl.de
Streaming string transducers define (partial) functions from input strings to output strings. A
streaming string transducer makes a single pass through the input string and uses a finite …

Regular programming for quantitative properties of data streams

R Alur, D Fisman, M Raghothaman - … , ESOP 2016, Held as Part of the …, 2016 - Springer
We propose quantitative regular expressions (QREs) as a high-level programming
abstraction for specifying complex numerical queries over data streams in a modular way …

Transducers, logic and algebra for functions of finite words

E Filiot, PA Reynier - ACM SIGLOG News, 2016 - dl.acm.org
The robust theory of regular languages is based on three important pillars: computation
(automata), logic, and algebra. In this paper, we survey old and recent results on extensions …

Regular functions and cost register automata

R Alur, L DAntoni, J Deshmukh… - 2013 28th Annual …, 2013 - ieeexplore.ieee.org
We propose a deterministic model for associating costs with strings that is parameterized by
operations of interest (such as addition, scaling, and minimum), a notion of regularity that …

StreamQRE: modular specification and efficient evaluation of quantitative queries over streaming data

K Mamouras, M Raghothaman, R Alur, ZG Ives… - Proceedings of the 38th …, 2017 - dl.acm.org
Real-time decision making in emerging IoT applications typically relies on computing
quantitative summaries of large data streams in an efficient and incremental manner. To …

On runtime enforcement via suppressions

L Aceto, I Cassar, A Francalanza… - arxiv preprint arxiv …, 2018 - arxiv.org
Runtime enforcement is a dynamic analysis technique that uses monitors to enforce the
behaviour specified by some correctness property on an executing system. The …

Regular combinators for string transformations

R Alur, A Freilich, M Raghothaman - Proceedings of the Joint Meeting of …, 2014 - dl.acm.org
We focus on (partial) functions that map input strings to a monoid such as the set of integers
with addition and the set of output strings with concatenation. The notion of regularity for …

String-to-string interpretations with polynomial-size output

M Bojańczyk, S Kiefer, N Lhote - arxiv preprint arxiv:1905.13190, 2019 - arxiv.org
String-to-string MSO interpretations are like Courcelle's MSO transductions, except that a
single output position can be represented using a tuple of input positions instead of just a …