WaVe: a verifiably secure WebAssembly sandboxing runtime

E Johnson, E Laufer, Z Zhao, D Gohman… - … IEEE Symposium on …, 2023 - ieeexplore.ieee.org
The promise of software sandboxing is flexible, fast and portable isolation; capturing the
benefits of hardwarebased memory protection without requiring operating system …

Large language models can connect the dots: Exploring model optimization bugs with domain knowledge-aware prompts

H Guan, G Bai, Y Liu - Proceedings of the 33rd ACM SIGSOFT …, 2024 - dl.acm.org
Model optimization, such as pruning and quantization, has become the de facto pre-
deployment phase when deploying deep learning (DL) models on resource-constrained …

On the vulnerability proneness of multilingual code

W Li, L Li, H Cai - Proceedings of the 30th ACM Joint European …, 2022 - dl.acm.org
Software construction using multiple languages has long been a norm, yet it is still unclear if
multilingual code construction has significant security implications and real security …

Easing maintenance of academic static analyzers

R Monat, A Ouadjaout, A Miné - International Journal on Software Tools for …, 2024 - Springer
Academic research in static analysis produces software implementations. These
implementations are time-consuming to develop and some need to be maintained in order …

Declarative static analysis for multilingual programs using CodeQL

D Youn, S Lee, S Ryu - Software: Practice and Experience, 2023 - Wiley Online Library
Declarative static program analysis has become one of the widely‐used program analysis
techniques. Declarative static analyzers perform three steps: creating databases of facts …

Mopsa-c: Modular domains and relational abstract interpretation for C programs (competition contribution)

R Monat, A Ouadjaout, A Miné - … Conference on Tools and Algorithms for …, 2023 - Springer
Mopsa is a multilanguage static analysis platform relying on abstract interpretation. It is able
to analyze C, Python, and programs mixing these two languages; we focus on the C analysis …

Bilingual problems: Studying the security risks incurred by native extensions in scripting languages

CA Staicu, S Rahaman, Á Kiss, M Backes - 32nd USENIX Security …, 2023 - usenix.org
Scripting languages are continuously gaining popularity due to their ease of use and the
flourishing software ecosystems surrounding them. These languages offer crash and …

LiSA: A generic framework for multilanguage static analysis

L Negrini, P Ferrara, V Arceri, A Cortesi - Challenges of Software …, 2023 - Springer
Modern software engineering revolves around distributed applications. From IoT networks to
client-server infrastructures, the application code is increasingly being divided into separate …

Aexpy: Detecting api breaking changes in python packages

X Du, J Ma - 2022 IEEE 33rd International Symposium on …, 2022 - ieeexplore.ieee.org
With the popularity of the Python language, com-munity developers create and maintain a lot
of third-party packages. APIs change frequently during the package evolving. Package …

Challenges of multilingual program specification and analysis

CA Furia, A Tiwari - … Symposium on Leveraging Applications of Formal …, 2024 - Springer
Multilingual programs, whose implementations are made of different languages, are gaining
traction especially in domains, such as web programming, that particularly benefit from the …