Smart contract development: Challenges and opportunities

W Zou, D Lo, PS Kochhar, XBD Le, X Xia… - IEEE transactions on …, 2019 - ieeexplore.ieee.org
Smart contract, a term which was originally coined to refer to the automation of legal
contracts in general, has recently seen much interest due to the advent of blockchain …

Neural transfer learning for repairing security vulnerabilities in c code

Z Chen, S Kommrusch… - IEEE Transactions on …, 2022 - ieeexplore.ieee.org
In this paper, we address the problem of automatic repair of software vulnerabilities with
deep learning. The major problem with data-driven vulnerability repair is that the few …

Moving fast with software verification

C Calcagno, D Distefano, J Dubreil, D Gabi… - NASA Formal Methods …, 2015 - Springer
For organisations like Facebook, high quality software is important. However, the pace of
change and increasing complexity of modern code makes it difficult to produce error-free …

What developers want and need from program analysis: an empirical study

M Christakis, C Bird - Proceedings of the 31st IEEE/ACM international …, 2016 - dl.acm.org
Program Analysis has been a rich and fruitful field of research for many decades, and
countless high quality program analysis tools have been produced by academia. Though …

Deductive software verification: from pen-and-paper proofs to industrial tools

R Hähnle, M Huisman - Computing and Software Science: State of the Art …, 2019 - Springer
Deductive software verification aims at formally verifying that all possible behaviors of a
given program satisfy formally defined, possibly complex properties, where the verification …

RacerD: compositional static race detection

S Blackshear, N Gorogiannis, PW O'Hearn… - Proceedings of the ACM …, 2018 - dl.acm.org
Automatic static detection of data races is one of the most basic problems in reasoning about
concurrency. We present RacerD—a static program analysis for detecting data races in Java …

Static automated program repair for heap properties

R van Tonder, C Le Goues - … of the 40th International Conference on …, 2018 - dl.acm.org
Static analysis tools have demonstrated effectiveness at finding bugs in real world code.
Such tools are increasingly widely adopted to improve software quality in practice …

VELVET: a noVel Ensemble Learning approach to automatically locate VulnErable sTatements

Y Ding, S Suneja, Y Zheng, J Laredo… - … on Software Analysis …, 2022 - ieeexplore.ieee.org
Automatically locating vulnerable statements in source code is crucial to assure software
security and alleviate developers' debugging efforts. This becomes even more important in …

Automatically inspecting thousands of static bug warnings with large language model: how far are we?

C Wen, Y Cai, B Zhang, J Su, Z Xu, D Liu… - ACM Transactions on …, 2024 - dl.acm.org
Static analysis tools for capturing bugs and vulnerabilities in software programs are widely
employed in practice, as they have the unique advantages of high coverage and …

Improving software quality in cryptography standardization projects

MJ Kannwischer, P Schwabe, D Stebila… - 2022 IEEE European …, 2022 - ieeexplore.ieee.org
The NIST post-quantum cryptography (PQC) standardization project is probably the largest
and most ambitious cryptography standardization effort to date, and as such it makes an …