7 papers
Generating Complex Code Analyzers from Natural Language Questions
Amirmohammad Nazari, Sadra Sabouri, Wang Bill Zhu +3
Many software development tasks, such as implementing features and fixing bugs, begin with developers posing questions about a codebase. However, answering questions about codebase…
Data Flows in You: Benchmarking and Improving Static Data-flow Analysis on Binary Executables
Nicolaas Weideman, Sima Arasteh, Mukund Raghothaman +2
Data-flow analysis is a critical component of security research. Theoretically, accurate data-flow analysis in binary executables is an undecidable problem, due to complexities of…
BinPool: A Dataset of Vulnerabilities for Binary Security Analysis
Sima Arasteh, Georgios Nikitopoulos, Wei-Cheng Wu +4
The development of machine learning techniques for discovering software vulnerabilities relies fundamentally on the availability of appropriate datasets. The ideal dataset consists…
Membership Testing for Semantic Regular Expressions
Yifei Huang, Matin Amini, Alexis Le Glaunec +2
SMORE (Chen et al., 2023) recently proposed the concept of semantic regular expressions that extend the classical formalism with a primitive to query external oracles such as datab…
Trim My View: An LLM-Based Code Query System for Module Retrieval in Robotic Firmware
Sima Arasteh, Pegah Jandaghi, Nicolaas Weideman +4
The software compilation process has a tendency to obscure the original design of the system and makes it difficult both to identify individual components and discern their purpose…
Provenance Guided Rollback Suggestions
David Zhao, Pavle Subotic, Mukund Raghothaman +1
Advances in incremental Datalog evaluation strategies have made Datalog popular among use cases with constantly evolving inputs such as static analysis in continuous integration an…