Results 1 to 9 of about 9 (9)

Static analyzer Svace for finding of defects in program source code

open access: yesТруды Института системного программирования РАН, 2018
This paper describes Svace, a tool for static program analysis developed in ISP RAS. This tool allows to find defects and potential vulnerabilities in source code of programs written in C/C++ languages.
V. P. Ivannikov   +6 more
doaj   +1 more source

Interprocedural taint analysis for LLVM-bitcode

open access: yesТруды Института системного программирования РАН, 2018
Today the development cycle of many application classes requires a security analysis stage. Taint analysis is widely used to check programs for different security vulnerabilities.
V. K. Koshelev   +2 more
doaj   +1 more source

Summary-based method of implementing arbitrary context-sensitive checks for source-based analysis via symbolic execution

open access: yesТруды Института системного программирования РАН, 2018
A specific approach to summary-based interprocedural symbolic execution is described. The approach is suitable for analysis of program source code developed with high-level programming languages and allows executing arbitrarily complex checks during ...
A. . Dergachev, A. . Sidorin
doaj   +1 more source

A static analysis tool Svace as a collection of analyzers with various complexity levels

open access: yesТруды Института системного программирования РАН, 2018
The paper describes a practical approach for finding bugs in the source code of programs using static analysis. This approach allows missing some of the defects.
A. . Borodin, A. . Belevancev
doaj   +1 more source

Inter-procedural buffer overflows detection in C/C++ source code via static analysis

open access: yesТруды Института системного программирования РАН, 2018
We propose inter-procedural static analysis tool for buffer overflow detection. It is based on previously developed intra-procedural algorithm which uses symbolic execution with state merging.
I. . Dudina
doaj   +1 more source

К вопросу о генерации начальных данных, обеспечивающих заданную трассу SPMD-программы.

open access: yesТруды Института системного программирования РАН, 2004
Исследуется проблема автоматизированной генерации входных данных для SPMD-программы на основании ее исходного текста. Актуальность проблемы определяется тем обстоятельством, что оценка производительности, масштабируемости и других динамических свойств ...
С.С. Гайсарян   +1 more
doaj  

Platform for interprocedural static analysis of binary code

open access: yesТруды Института системного программирования РАН, 2018
This paper describes the developed platform for static analysis of binary code. The platform is developed based on interprocedural, flow-sensitive and context-sensitive analysis of the program.
H. K. Aslanyan
doaj  

Using static analysis for finding security vulnerabilities and critical errors in source code

open access: yesТруды Института системного программирования РАН, 2018
Static analysis is a popular way of finding given patterns in source or binary code (e.g., coding style errors, violations of project guidelines of using specific libraries or language features, critical errors, security vulnerabilities, malicious code).
Arutyun Avetisyan   +3 more
doaj  
Home - About - Disclaimer - Privacy