Frama-C: A software analysis perspective

P Cuoq, F Kirchner, N Kosmatov, V Prevosto… - … conference on software …, 2012 - Springer
Frama-C is a source code analysis platform that aims at conducting verification of industrial-
size C programs. It provides its users with a collection of plug-ins that perform static analysis …

Relational cost analysis

E Çiçek, G Barthe, M Gaboardi, D Garg… - ACM SIGPLAN …, 2017 - dl.acm.org
Establishing quantitative bounds on the execution cost of programs is essential in many
areas of computer science such as complexity analysis, compiler optimizations, security and …

Explaining counterexamples with giant-step assertion checking

B Becker, CB Lourenço, C Marché - arXiv preprint arXiv:2108.02967, 2021 - arxiv.org
Identifying the cause of a proof failure during deductive verification of programs is hard: it
may be due to an incorrectness in the program, an incompleteness in the program …

[HTML][HTML] Integrating SMT solvers in Rodin

D Déharbe, P Fontaine, Y Guyot, L Voisin - Science of Computer …, 2014 - Elsevier
Formal development in Event-B generally requires the validation of a large number of proof
obligations. Some tools automatically discharge a significant part of them, thus augmenting …

[HTML][HTML] Abstract execution: automatically proving infinitely many programs

D Steinhöfel - 2020 - tubiblio.ulb.tu-darmstadt.de
Abstract programs contain schematic placeholders representing potentially infinitely many
concrete programs. They naturally occur in multiple areas of computer science concerned …

[HTML][HTML] Instrumenting a weakest precondition calculus for counterexample generation

S Dailler, D Hauzar, C Marché, Y Moy - … of logical and algebraic methods in …, 2018 - Elsevier
A major issue in the activity of deductive program verification is to understand why
automated provers fail to discharge a proof obligation. To help the user understand the …

Combining analyses for C program verification

L Correnson, J Signoles - International Workshop on Formal Methods for …, 2012 - Springer
Static analyzers usually return partial results. They can assert that some properties are valid
during all possible executions of a program, but generally leave some other properties to be …

Bidirectional type checking for relational properties

E Çiçek, W Qu, G Barthe, M Gaboardi… - Proceedings of the 40th …, 2019 - dl.acm.org
Relational type systems have been designed for several applications including information
flow, differential privacy, and cost analysis. In order to achieve the best results, these …

A simplex-based extension of Fourier-Motzkin for solving linear integer arithmetic

F Bobot, S Conchon, E Contejean… - … : 6th International Joint …, 2012 - Springer
This paper describes a novel decision procedure for quantifier-free linear integer arithmetic.
Standard techniques usually relax the initial problem to the rational domain and then …

Leveraging linear and mixed integer programming for SMT

T King, C Barrett, C Tinelli - 2014 Formal Methods in Computer …, 2014 - ieeexplore.ieee.org
SMT solvers combine SAT reasoning with specialized theory solvers either to find a feasible
solution to a set of constraints or to prove that no such solution exists. Linear programming …