Modelgen: mining explicit information flow specifications from concrete executions

No abstract is available for this paper.

• Publication year

  2015

• Venue

  International Symposium on Software Testing and Analysis

• Publication date

  2015-07-13

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/2771783.2771810
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Specification Inference Using Context-Free Language Reachability

  2015cited by this paper
• Apposcopy: semantics-based detection of Android malware through static analysis

  2014cited by this paper
• Static Analysis for Extracting Permission Checks of a Large Scale Framework: The Challenges and Solutions for Analyzing Android

  2014cited by this paper
• FlowDroid: precise context, flow, field, object-sensitive and lifecycle-aware taint analysis for Android apps

  2014cited by this paper
• A Machine-learning Approach for Classifying and Categorizing Android Sources and Sinks

  2014cited by this paper
• Improving efficiency of dynamic analysis with dynamic dependence summaries

  2013influential reference
• Modeling Software Execution Environment

  2012cited by this paper
• Using dynamic analysis to discover polynomial and array invariants

  2012cited by this paper
• Dynamic trace-based analysis of vectorization potential of applications

  2012cited by this paper
• Dexpler: converting Android Dalvik bytecode to Jimple for static analysis with Soot

  2012cited by this paper
• JavaMOP: Efficient parametric runtime monitoring framework

  2012cited by this paper
• PScout: analyzing the Android permission specification

  2012cited by this paper
• Multiple facets for dynamic information flow

  2012cited by this paper
• Android permissions demystified

  2011cited by this paper
• Dynamic inference of static types for ruby

  2011cited by this paper
• F4F: taint analysis of framework-based web applications

  2011influential reference
• TaintDroid

  2010cited by this paper
• Soot: a Java bytecode optimization framework

  2010cited by this paper
• Using dynamic execution traces and program invariants to enhance behavioral model inference

  2010cited by this paper
• All You Ever Wanted to Know about Dynamic Taint Analysis and Forward Symbolic Execution (but Might Have Been Afraid to Ask)

  2010cited by this paper
• The RoadRunner Dynamic Analysis Framework for Concurrent Programs

  2010cited by this paper
• Toward Automated Detection of Logic Vulnerabilities in Web Applications

  2010cited by this paper
• A comparative study of programmer-written and automatically inferred contracts

  2009cited by this paper
• TAJ: effective taint analysis of web applications

  2009cited by this paper
• Automatic steering of behavioral model inference

  2009cited by this paper
• Javert: fully automatic mining of general temporal properties from dynamic traces

  2008cited by this paper
• Automatic generation of software behavioral models

  2008cited by this paper
• Sofya: Supporting Rapid Development of Dynamic Program Analyses for Java

  2007cited by this paper
• Discovering Documentation for Java Container Classes

  2007cited by this paper
• Unified control flow and data dependence traces

  2007cited by this paper
• Dytan: a generic dynamic taint analysis framework

  2007cited by this paper
• The Daikon system for dynamic detection of likely invariants

  2007cited by this paper
• Perracotta: mining temporal API rules from imperfect traces

  2006cited by this paper
• Sofya: A Flexible Framework for Development of Dynamic Program Analyses for Java Software

  2006influential reference
• SMArTIC: towards building an accurate, robust and scalable specification miner

  2006cited by this paper
• Automatic extraction of abstract-object-state machines from unit-test executions

  2006cited by this paper
• Mining object behavior with ADABU

  2006cited by this paper
• Adding trace matching with free variables to AspectJ

  2005cited by this paper
• Finding Security Vulnerabilities in Java Applications with Static Analysis

  2005cited by this paper
• Finding application errors and security flaws using PQL: a program query language

  2005cited by this paper
• Dynamic taint propagation for Java

  2005cited by this paper
• Event-based runtime verification of java programs

  2005cited by this paper
• Mining Temporal Specifications for Error Detection

  2005cited by this paper
• Relational queries over program traces

  2005cited by this paper
• Pin: building customized program analysis tools with dynamic instrumentation

  2005cited by this paper
• Language-based information-flow security

  2003influential reference
• ASM: a code manipulation tool to implement adaptable systems

  2002cited by this paper
• Automatic generation of program specifications

  2002cited by this paper
• Mining specifications

  2002cited by this paper
• Java-MaC: a Run-time Assurance Tool for Java Programs

  2001cited by this paper
• JFlow: practical mostly-static information flow control

  1999cited by this paper
• Byte Code Engineering

  1999cited by this paper
• The SLam calculus: programming with secrecy and integrity

  1998cited by this paper
• On the Synthesis of Finite-State Machines from Samples of Their Behavior

  1972cited by this paper
• Purdue e-Pubs Purdue e-Pubs

  year unknowncited by this paper
• RETROSPECTIVE: ATOM A System for Building Customized Program Analysis Tools

  year unknowncited by this paper

• Symmaries: Automatic Inference of Formal Security Summaries for Java Programs

  2025cites this paper
• Spectre: Automated Aliasing Specifications Generation for Library APIs with Fuzzing

  2025cites this paper
• Seal: Towards Diverse Specification Inference for Linux Interfaces from Security Patches

  2025cites this paper
• Detecting Security Vulnerabilities with Vulnerability Nets

  2022cites this paper
• Extracting Taint Specifications for JavaScript Libraries

  2020influential citation
• Inferring Taint Specifications of Libraries

  2020cites this paper
• Scalable taint specification inference with big code

  2019cites this paper
• Unsupervised learning of API aliasing specifications

  2019cites this paper
• Inferring Patterns for Taint-Style Vulnerabilities With Security Patches

  2019cites this paper
• Eventually Sound Points-To Analysis with Specifications

  2019cites this paper
• The Dynamics of Software Composition Analysis

  2019cites this paper
• The construction and applications of callback control flow graphs for event-driven and framework-based mobile apps

  2019cites this paper
• Canonical Representations of k-Safety Hyperproperties

  2019cites this paper
• A Documentation-based Constraint Generation Method for Java APIs

  2018cites this paper
• Eventually Sound Points-To Analysis with Missing Code

  2018influential citation
• Dataflow Tunneling: Mining Inter-Request Data Dependencies for Request-Based Applications

  2018cites this paper
• Driver Generation for Java EE Web Applications

  2018cites this paper
• Guided randomized search over programs for synthesis and program optimization

  2018cites this paper
• Active learning of points-to specifications

  2017cites this paper
• Specification mining and automated testing of mobile applications

  2017cites this paper
• Experience Report: Log-Based Behavioral Differencing

  2017cites this paper
• 1 Active Learning of Points-To Specifications

  2017cites this paper
• Generating Predicate Callback Summaries for the Android Framework

  2017cites this paper
• Eventually Sound Points-To Analysis with Missing Code

  2017influential citation
• Summarizing Control Flow of Callbacks for Android API Methods

  2016cites this paper
• Synthesizing Framework Models for Symbolic Execution

  2016cites this paper
• Framework synthesis for Symbolic Execution of Event-Driven Frameworks

  2016cites this paper
• Synthesizing framework models for symbolic execution

  2016cites this paper
• FlowMiner: Automatic Summarization of Library Data-Flow for Malware Analysis

  2015cites this paper
• Automatic Extraction of Library Data-Flow Semantics for Partial Program Analysis

  2015influential citation
• Interactively verifying absence of explicit information flows in Android apps

  2015cites this paper