Programming languages and software engineering tools routinely encounter components
that are difficult to reason on via formal techniques or whose formal semantics are not even …

We consider interprocedural data-flow analysis as formalized by the standard IFDS
framework, which can express many widely-used static analyses such as reaching …

It is challenging to have a general solution to precisely detect arbitrary vulnerabilities. Thus
security research has focused on detecting specific types of vulnerabilities. Missing checks …

Interactive theorem provers (ITPs) exploit the collaboration between humans and computers,
enabling proof of complex theorems. Further, ITPs allow extraction of provably correct …

Data-flow analysis is a general technique used to compute information of interest at different
points of a program and is considered to be a cornerstone of static analysis. In this thesis, we …

Missing checks for untrusted inputs used in security-sensitive operations is one of the major
causes of various vulnerabilities. Efficiently detecting and repairing missing checks are …

With the constant increase in code development, testing has become essential. Because of
the higher cost of dynamic testing, static testing is preferred. One of the existing techniques …

Static analysis is an effective way of checking memory safety issues in program. Usually,
multiple analysis algorithms usually run together to achieve a precise analysis result. In this …