We present the DOOP framework for points-to analysis of Java programs. DOOP builds on
the idea of specifying pointer analysis algorithms declaratively, using Datalog: a logic-based …

When dealing with millions of lines of code, we still cannot have the cake and eat it: sparse
value-flow analysis is powerful in checking source-sink problems, but existing work cannot …

The paradigm of Tabled Logic Programming (TLP) is now supported by a number of Prolog
systems, including XSB, YAP Prolog, B-Prolog, Mercury, ALS, and Ciao. The reasons for this …

This paper presents a demand-driven, flow-insensitive analysisalgorithm for answering may-
alias queries. We formulate thecomputation of alias queries as a CFL-reachability problem …

The subject of this article is flow-and context-insensitive pointer analysis. We present a novel
approach for precisely modelling struct variables and indirect function calls. Our method …

Program analyses support software developers, for example, through error detection, code-
quality assurance, and by enabling compiler optimizations and refactorings. To provide real …

Enforcing fine-grained Control-Flow Integrity (CFI) is critical for increasing software security.
However, for commercial off-the-shelf (COTS) binaries, constructing highprecision Control …

Developing scalable and precise points-to analyses is increasingly important for analysing
and optimising object-oriented programs where pointers are used pervasively. An …

Dependencies between program elements need to be modeled from different perspectives
reflecting architectural, design, and implementation level decisions. To avoid erosion of the …

We present D4, a fast concurrency analysis framework that detects concurrency bugs (eg,
data races and deadlocks) interactively in the programming phase. As developers add …