Tutorial on static inference of numeric invariants by abstract interpretation
A Miné - Foundations and Trends® in Programming …, 2017 - nowpublishers.com
Born in the late 70s, Abstract Interpretation has proven an effective method to construct static
analyzers. It has led to successful program analysis tools routinely used in avionic …
analyzers. It has led to successful program analysis tools routinely used in avionic …
Inductive program synthesis via iterative forward-backward abstract interpretation
A key challenge in example-based program synthesis is the gigantic search space of
programs. To address this challenge, various work proposed to use abstract interpretation to …
programs. To address this challenge, various work proposed to use abstract interpretation to …
C to Checked C by 3C
Owing to the continued use of C (and C++), spatial safety violations (eg, buffer overflows)
still constitute one of today's most dangerous and prevalent security vulnerabilities. To …
still constitute one of today's most dangerous and prevalent security vulnerabilities. To …
Generation of Violation Witnesses by Under-Approximating Abstract Interpretation
This works studies abstract backward semantics to infer sufficient program preconditions,
based on an idea first proposed in previous work. This analysis exploits under-approximated …
based on an idea first proposed in previous work. This analysis exploits under-approximated …
A²I: abstract² interpretation
The fundamental idea of Abstract2 Interpretation (A2I), also called meta-abstract
interpretation, is to apply abstract interpretation to abstract interpretation-based static …
interpretation, is to apply abstract interpretation to abstract interpretation-based static …
Program analysis via efficient symbolic abstraction
This paper concerns the scalability challenges of symbolic abstraction: given a formula ϕ in
a logic L and an abstract domain A, find a most precise element in the abstract domain that …
a logic L and an abstract domain A, find a most precise element in the abstract domain that …
Demystifying Template-Based Invariant Generation for Bit-Vector Programs
The template-based approach to invariant generation is a parametric and relatively
complete methodology for inferring loop invariants. The relative completeness ensures the …
complete methodology for inferring loop invariants. The relative completeness ensures the …
A fresh look at zones and octagons
Zones and Octagons are popular abstract domains for static program analysis. They enable
the automated discovery of simple numerical relations that hold between pairs of program …
the automated discovery of simple numerical relations that hold between pairs of program …
Polynomial analysis of modular arithmetic
T Seed, C Coppins, A King, N Evans - International Static Analysis …, 2023 - Springer
The modular polynomial abstract domain, MPAD, is proposed, whose invariants are systems
of polynomial equations that hold modulo a power of 2. Its domain operations are founded …
of polynomial equations that hold modulo a power of 2. Its domain operations are founded …
Horn clauses as an intermediate representation for program analysis and transformation
Many recent analyses for conventional imperative programs begin by transforming programs
into logic programs, capitalising on existing LP analyses and simple LP semantics. We …
into logic programs, capitalising on existing LP analyses and simple LP semantics. We …