Symbolic String Verification: Combining String Analysis and Size Analysis

No abstract is available for this paper.

• Publication year

  2009

• Venue

  International Conference on Tools and Algorithms for Construction and Analysis of Systems

• Publication date

  2009-03-27

• Fields of study

  Mathematics, Computer Science

• Identifiers
  DOI 10.1007/978-3-642-00768-2_28
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Lifting abstract interpreters to quantified logical domains

  2008cited by this paper
• Testing for buffer overflows with length abstraction

  2008cited by this paper
• Discovering properties about arrays in simple programs

  2008cited by this paper
• Saner: Composing Static and Dynamic Analysis to Validate Sanitization in Web Applications

  2008cited by this paper
• Symbolic String Verification: An Automata-Based Approach

  2008cited by this paper
• A Static Analysis Framework For Detecting SQL Injection Vulnerabilities

  2007cited by this paper
• A buffer overflow benchmark for software model checkers

  2007cited by this paper
• Abstracting Symbolic Execution with String Analysis

  2007cited by this paper
• Static Detection of Security Vulnerabilities in Scripting Languages

  2006cited by this paper
• Widening Arithmetic Automata

  2004cited by this paper
• A Temporal Logic of Nested Calls and Returns

  2004cited by this paper
• CSSV: towards a realistic tool for statically detecting all buffer overflows in C

  2003influential reference
• Efficient Symbolic Representations for Arithmetic Constraints in Verification

  2003cited by this paper
• Precise Analysis of String Expressions

  2003cited by this paper
• Buffer overrun detection using linear programming and static analysis

  2003cited by this paper
• A First Step Towards Automated Detection of Buffer Overrun Vulnerabilities

  2000cited by this paper
• On the Construction of Automata from Linear Arithmetic Constraints

  2000cited by this paper

• String Constraints with Concatenation and Transducers Solved Efficiently (Technical Report)

  2020cites this paper
• Platform-Independent Malware Analysis Applicable to Windows and Linux Environments

  2020cites this paper
• Suitability of Finite State Automata to Model String Constraints in Probablistic Symbolic Execution

  2019cites this paper
• Parameterized model counting for string and numeric constraints

  2018cites this paper
• Indexing Operators to Extend the Reach of Symbolic Execution

  2018cites this paper
• A Symbolic Model Checking Approach to the Analysis of String and Length Constraints

  2018cites this paper
• Automata Based String Analysis

  2017cites this paper
• A New View on Classification of Software Vulnerability Mitigation Methods

  2017cites this paper
• A Brief Survey of Related Work

  2017cites this paper
• Automata-based Model Counting String Constraint Solver for Vulnerability Analysis

  2017cites this paper
• String constraints with concatenation and transducers solved efficiently

  2017cites this paper
• Z3str2: an efficient solver for strings, regular expressions, and length constraints

  2016cites this paper
• String Analysis via Automata Manipulation with Logic Circuit Representation

  2016cites this paper
• Other things besides number: Abstraction, constraint propagation, and string variable types

  2016cites this paper
• A Solver for a Theory of Strings and Bit-vectors

  2016cites this paper
• String Solving with Word Equations and Transducers: Towards a Logic for Analysing Mutation XSS (Full Version)

  2016cites this paper
• Constraint Solving on Bounded String Variables

  2015cites this paper
• Bit-vector Support in Z3-str2 Solver and Automated Exploit Synthesis

  2015cites this paper
• Effective Search-Space Pruning for Solvers of String Equations, Regular Expressions and Length Constraints

  2015cites this paper
• Deciding Type-Based Partial-Order Constraints for Path-Sensitive Analysis

  2015cites this paper
• String Analysis for Vulnerability Detection and Repair

  2015cites this paper
• Bit-vector Support in Z 3-str 2 Solver and Automated Exploit Synthesis by Sanu Edayath Subramanian

  2015cites this paper
• Integration of AI and OR Techniques in Constraint Programming: 12th International Conference, CPAIOR 2015, Barcelona, Spain, May 18-22, 2015, Proceedings

  2015cites this paper
• String solving with word equations and transducers: towards a logic for analysing mutation XSS

  2015cites this paper
• Inferring Grammatical Summaries of String Values

  2014cites this paper
• Evaluation of string constraint solvers in the context of symbolic execution

  2014cites this paper
• Evaluation of String Constraint Solvers Using Dynamic Symbolic Execution

  2014influential citation
• Automatic Detection and Repair of Input Validation and Sanitization Bugs

  2014cites this paper
• JST: An automatic test generation tool for industrial Java applications with strings

  2013cites this paper
• Bounded Strings for Constraint Programming

  2013cites this paper
• RADA: a tool for reasoning about algebraic data types with abstractions

  2013cites this paper
• PASS: String Solving with Parameterized Array and Interval Automaton

  2013cites this paper
• Z3-str: a z3-based string solver for web application analysis

  2013cites this paper
• Systematic Techniques for Finding and Preventing Script Injection Vulnerabilities

  2012cites this paper
• StrSolve: solving string constraints lazily

  2012cites this paper
• On synchronized multi-tape and multi-head automata

  2012cites this paper
• Multitape NFA: Weak Synchronization of the Input Heads

  2012cites this paper
• Symbolic execution of programs with strings

  2012cites this paper
• Weak Synchronization and Synchronizability of Multitape Pushdown Automata and Turing Machines

  2012cites this paper
• An SMT-LIB Format for Sequences and Regular Expressions

  2012cites this paper
• Simple linear string constraints

  2012cites this paper
• String Abstractions for String Verification

  2011influential citation
• Under consideration for publication in Formal Aspects of Computing Simple Linear String Constraints 1

  2011cites this paper
• An Evaluation of Automata Algorithms for String Analysis

  2011cites this paper
• On Synchronized Multitape and Multihead Automata

  2011cites this paper
• A Symbolic Execution Framework for JavaScript

  2010cites this paper
• As-If Infinitely Ranged Integer Model

  2010cites this paper
• Modeling Regular Replacement for String Constraint Solving

  2010cites this paper
• Symbolic Automata Constraint Solving

  2010cites this paper
• Relational String Verification Using Multi-Track Automata

  2010cites this paper
• Automatic verification of string manipulating programs

  2010cites this paper
• A Slice-based Decision Procedure forType-based Partial OrdersTR-UNL-CSE-2010-0004

  2010cites this paper
• A Slice-Based Decision Procedure for Type-Based Partial Orders

  2010cites this paper
• Rex: Symbolic Regular Expression Explorer

  2010cites this paper
• On test repair using symbolic execution

  2010cites this paper
• Instrumented Fuzz Testing Using AIR Integers

  2010cites this paper
• Solving string constraints lazily

  2010cites this paper
• As-If Infinitely Ranged Integer Model, Second Edition

  2010cites this paper
• Decision Procedures for String Constraints

  2010influential citation
• Generating Vulnerability Signatures for String Manipulating Programs Using Automata-Based Forward and Backward Symbolic Analyses

  2009cites this paper
• A decision procedure for subset constraints over regular languages

  2009cites this paper
• On Precise Modeling of Regular Replacement

  2009cites this paper
• On Simple Linear String Equations

  2009cites this paper
• Verification of String Manipulating Programs Using Multi-Track Automata

  2009cites this paper
• Solving Extended Regular Constraints Symbolically

  2009influential citation