에세이

• 지향성 퍼징을 위해 정적분석기를 고친다면 (흐름 둔감 정적 분석)
• 정의 사용 그래프를 빨리 만드는 방법
• Parse, don’t Validate - Aid Static Analysis for C

들은 강연

• 2024 여름 SIGPL 초청강연 2 학계 진출 졸업생 최재승 교수 - 프로그래밍 언어와 보안의 만남

구글과 정적 분석

https://research.google/pubs/lessons-from-building-static-analysis-tools-at-google/

[Lessons from Building Static Analysis Tools at Google] In this article, we describe how we have applied the lessons from Google’s previous experience with FindBugs Java analysis, as well as lessons from the academic literature, to build a successful static analysis infrastructure that is used daily by the majority of engineers at Google. Our tooling detects thousands of issues per day that are fixed by engineers, by their own choice, before the problematic code is checked into the codebase.