Value-flow analysis is a fundamental technique in program analysis, benefiting various
clients, such as memory corruption detection and taint analysis. However, existing efforts …

Automated Static Analysis Tools (ASATs) have evolved over time to assist in detecting bugs.
However, the excessive false warnings can impede developers' productivity and confidence …

Software composition analysis (SCA) denotes the process of identifying open-source
software components in an input software application. SCA has been extensively developed …

Taint analysis of value flows, as a static analysis technique, has gained widespread
application in the fields of software security and vulnerability mining. However, when dealing …

Value flow analysis that tracks the flow of values via data dependence is a widely used
technique for detecting a broad spectrum of software bugs. However, the scalability issue …

C language programs are often subject to memory vulnerabilities, posing substantial
security risks to software systems. Conventional detection techniques, rooted in static value …

High-precision static analysis can effectively detect Null Pointer Dereference (NPD)
vulnerabilities in C language, but the performance overhead is significant. In recent years …

In the realm of cloud-native applications, ensuring robustness amidst the complexities of
distributed architectures presents a substantial challenge. The dynamic and interconnected …

In modern software systems, the construction of Value-Flow Graphs (VFGs) is a critical step
for performing static analysis and vulnerability detection. However, traditional VFG …

In recent years, data-centric systems have gained significant popularity, particularly in
industrial production settings. These systems serve as the backbone of modern computing …