PPT-Static Analysis, part 2

Claire Le Goues 2015 c C Le Goues 1 Learning goals Really understand control and dataflow analysis Receive a highlevel introduction to more formal proving tools Develop evidencebased recommendations for how to deploy analysis tools in your project or organization. http://www.imagix.com The quality checks and software metrics produced by Imagix 4D enable you to identify potential problems during the development and maintenance of your source code. By identifying and correcting the problem areas, you're able to improve the reliability, portability, and maintainability of your software. Victor . Vianu. U.C. San Diego. i. n Databases. What is it?. Reasoning about queries and applications to guarantee. . . correctness. g. ood performance. Important to experts .... Oleg . Girko. , Alexey Lastovetsky. School of Computer Science & Informatics. University College Dublin. Dublin, Ireland. GridRPC and collective mapping. GridRPC limitations. Individual mapping. Client-server communication only. Presented by Justin Samuel. For UW CSE 504, Spring ‘10. Instructor: Ben Livshits. Finding Security Vulnerabilities in Java Applications with Static Analysis. V. Benjamin Livshits and Monica S. Lam. Andreas Fuchsberger. Information Security Technologist. Microsoft. Agenda. Code Analysis/Code Inspection. Motivation. Static Code Analysis. History. Current technologies. CAT.NET. How CAT.NET works. Installation. Testing Without Executing the Code. Pavlina Koleva. Junior QA Engineer. WinCore. . .  . Telerik QA Academy. Table of Contents. Static . Techniques – Main Concepts. Static Analysis by . David Devecsery,. Peter M. Chen, Satish Narayanasamy, Jason Flinn. University of Michigan. Motivation – Problem . Dynamic analysis is essential. Memory errors. Buffer overflow, use-after-free, double free, memory leak…. Engler. , . Lujo. . Bauer. , Michelle . Mazurek. http://philosophyofscienceportal.blogspot.com/2013/04/van-de-graaff-generator-redux.html. Static analysis. Current Practice. Testing: . Check correctness on set of inputs. Accelerating Dynamic Analysis through Predicated Static Analysis. David Devecsery. , Peter Chen, Jason Flinn, Satish Narayanasamy. Systems Today are Unsafe. Runtime systems are largely unmonitored.. Accelerating Dynamic Analysis through Predicated Static Analysis. David Devecsery. , Peter Chen, Jason Flinn, Satish Narayanasamy. Systems Today are Unsafe. Runtime systems are largely unmonitored.. for Security and Privacy. Manuel . Egele. megele@cmu.edu. Carnegie Mellon University. Mobile Devices are Ubiquitous. 400 . million . iOS. devices . in . total. (June 2012). 400 million Android devices in . Chapter 2: Malware Analysis in Virtual Machines. Chapter 3: Basic Dynamic Analysis. Chapter 1: Basic Static Techniques. Static analysis. Examine payload without executing it to determine function and maliciousness. Guillaume P. Brat Arnaud J. Venet. g. uillaume.p.brat@nasa.gov . arnaud.j.venet. @nasa.gov. Carnegie Mellon University. NASA . Ames Research . Center. Roadmap. Static analysis for flight-critical systems. 1. Goals for Today. 2. learn about preventing class instantiation. learn . about . methods. static . methods. method header. method signature. method return type. method parameters. pass-by-value. new .