【24h】

Combining Symbolic and Numerical Domains for Information Leakage Analysis

机译:结合符号域和数字域进行信息泄漏分析

获取原文
获取原文并翻译 | 示例

摘要

We introduce an abstract domain for information-flow analysis of software. The proposal combines variable dependency analysis with numerical abstractions, yielding to accuracy and efficiency improvements. We apply the full power of the proposal to the case of database query languages as well. Finally, we present an implementation of the analysis, called Sails, as an instance of a generic static analyzer. Keeping the modular construction of the analysis, the tool allows one to tune the granularity of heap analysis and to choose the numerical domain involved in the reduced product. This way the user can tune the information leakage analysis at different levels of precision and efficiency.
机译:我们介绍了一个用于软件信息流分析的抽象域。该提案将变量依赖性分析与数值抽象相结合,从而提高了准确性和效率。我们还将提案的全部功能应用于数据库查询语言。最后,作为通用静态分析器的实例,我们介绍了一种名为Sails的分析实现。保持分析的模块化结构,该工具允许调整堆分析的粒度,并选择精简产品所涉及的数值域。这样,用户可以以不同的精度和效率级别调整信息泄漏分析。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号