I am happy to share that our paper deepSURF has been accepted to IEEE S&P 2026!

This effort was led by my student George Androutsopoulos (https://www.linkedin.com/in/gandrout/).

deepSURF combines the use of program analysis and LLMs to uncover memory safety bugs in Rust’s unsafe code.

You can check out the code and the paper here:

https://github.com/purseclab/deepSURF

https://arxiv.org/abs/2506.15648

#Rust #Security #ProgramAnalysis #LLM #Fuzzing #Purdue

Yesterday we published the next recording from the #LLVM #Meetup #Darmstadt

Alexander Hueck - Opaque Pointers and Debug Info [LLVM Meetup Darmstadt March 2023]
https://youtu.be/bQIxgYMmWn4

Go check it out to learn a bit more about #DebugInfo and #OpaquePointers in the light of a #Typechecker for #MPI programs

#HPC #ProgramAnalysis

Alexander Hueck - Opaque Pointers and Debug Info [LLVM Meetup Darmstadt March 2023]

YouTube

After quite a bit of work, I'm delighted that #MetaCG v0.8.0 just got released and I want to thank everybody who contributed to the project.

Check it out, star the repo and watch for more updates.
Get your copy at https://github.com/tudasc/MetaCG/releases/tag/v0.8.0

#HPC #llvm #clang #software #ProgramAnalysis

SOAP 2024 is now accepting paper submissions! Submit your experiments, tools, ideas on program analysis by March 4th, 2024 (https://soap24.hotcrp.com).

More info here 👉 https://pldi24.sigplan.org/home/SOAP-2024 #SOAP2024 #CallForPapers #ProgramAnalysis
Co-located with #PLDI2024

SOAP 2024

Security flaws in an SSO plugin for Caddy - By Maciej Domanski, Travis Peters, and David Pokora
We identified 10 security vulnerabili... https://blog.trailofbits.com/2023/09/18/security-flaws-in-an-sso-plugin-for-caddy/ #dynamicanalysis #programanalysis #staticanalysis #mitigations #exploits #attacks #semgrep #audits #go
Security flaws in an SSO plugin for Caddy

By Maciej Domanski, Travis Peters, and David Pokora We identified 10 security vulnerabilities within the caddy-security plugin for the Caddy web server that could enable a variety of high-severity …

Trail of Bits Blog
PhD position on Program Analysis for LLVM-IR and all its source languages - Looking for a job that matters?

With the omnipresence of software, our lives and income depend crucially on the quality of software: software failures can cause planes to crash, emergency service to be unreachable, and companies to lose millions of dollars (because of missed business op…

Werken bij

@joxean I usually think of "sound" in SAST as "no false negatives" (for what you are modelling, of course).

Now wrap your head around what a "soundy" analysis is...

#ProgramAnalysis #SoundAnalysis #soundy #SAST

I'm happy to share that I just released #MetaCG version 0.5.0 \o/

Besides a number of important bug fixes, we have *finally* reworked some internals that gave us a great performance improvement. For several use cases from minutes to seconds.
Thank you so much to everybody who contributed.

If your curious, check it out at https://github.com/tudasc/MetaCG

#HPC #ProgramAnalysis #CallGraph #TUDaSC

GitHub - tudasc/MetaCG: MetaCG offers an annotated whole program call-graph tool for Clang/LLVM.

MetaCG offers an annotated whole program call-graph tool for Clang/LLVM. - tudasc/MetaCG

GitHub
What child is this? - A Primer on Process Reparenting in Windows
By Yarden Shafir
Process reparenting is... https://blog.trailofbits.com/2022/12/20/process-reparenting-microsoft-windows/ #microsoftwindows #programanalysis
What child is this?

A Primer on Process Reparenting in Windows By Yarden Shafir Process reparenting is a technique used in Microsoft Windows to create a child process under a different parent process than the one maki…

Trail of Bits Blog
What child is this?

A Primer on Process Reparenting in Windows By Yarden Shafir Process reparenting is a technique used in Microsoft Windows to create a child process under a different parent process than the one maki…

Trail of Bits Blog