5 papers
Sub-Turing Islands in the Wild
Earl T. Barr, David W. Binkley, Mark Harman +1
Recently, there has been growing debate as to whether or not static analysis can be truly sound. In spite of this concern, research on techniques seeking to at least partially answ…
DCert: Find the Leak in Your Pocket
Mohamed Nassim Seghir
Static data-flow analysis has proven its effectiveness in assessing security of applications. One major challenge it faces is scalability to large software. This issue is even exac…
Certificate Enhanced Data-Flow Analysis
Mohamed Nassim Seghir
Proof-carrying-code was proposed as a solution to ensure a trust relationship between two parties: a (heavyweight) analyzer and a (lightweight) checker. The analyzer verifies the c…
Data-Flow Guided Slicing
Mohamed Nassim Seghir
We propose a flow-insensitive analysis that prunes out portions of code which are irrelevant to a specified set of data-flow paths. Our approach is fast and scalable, in addition t…
DroidGen: Constraint-based and Data-Driven Policy Generation for Android
Mohamed Nassim Seghir, David Aspinall
We present DroidGen a tool for automatic anti-malware policy inference. DroidGen employs a data-driven approach: it uses a training set of malware and benign applications and makes…