MichelsonLiSA: A Static Analyzer for Tezos

Olivieri, Luca; Jensen, Thomas; Negrini, Luca; Spoto, Fausto

doi:10.1109/percomworkshops56833.2023.10150247

Cited by 6 publications

(1 citation statement)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Each area corresponds to a separate configurable analysis component that operates agnostically w.r. Code parsing logic and the definition of language-specific statements are provided by Frontends such as GoLiSA, 12 which can also provide implementations for LiSA's components. Several frontends exist for different languages, 12,27,28 with each constituting effective static analyzers for individual languages that can be combined to obtain multilanguage analyses. In particular, GoLiSA provides a Go-specific Heap Domain to accurately track memory operations, while it exploits a context-based Interprocedural Analysis provided out-of-the-box by LiSA.…”

Section: Lisa and Golisamentioning

confidence: 99%

Tarsis: An effective automata‐based abstract domain for string analysis

Negrini,

Arceri,

Cortesi

et al. 2024

J Software Evolu Process

Self Cite

View full text Add to dashboard Cite

In this paper, we introduce Tarsis, a new abstract domain based on the abstract interpretation theory that approximates string values through finite state automata. The main novelty of Tarsis is that it works over an alphabet of strings instead of single characters. On the one hand, such an approach requires a more complex and refined definition of the lattice operators and of the abstract semantics of string operators. On the other hand, it is in position to obtain strictly more precise results than state‐of‐the‐art approaches. We compare Tarsis both with simpler domains and with the standard automata model, targeting case studies containing standard yet challenging string manipulations. The performance gain w.r.t. the standard automata model is also assessed, measuring the speed‐up gained by Tarsis. Experiments confirm that Tarsis can obtain precise results without incurring in excessive computational costs.

show abstract

Section: Lisa and Golisamentioning

confidence: 99%

Tarsis: An effective automata‐based abstract domain for string analysis

Negrini,

Arceri,

Cortesi

et al. 2024

J Software Evolu Process

Self Cite

View full text Add to dashboard Cite

show abstract

Teaching Through Practice: Advanced Static Analysis with LiSA

Negrini,

Arceri,

Olivieri

et al. 2024

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Nowadays, ready-to-use libraries and code generation are often used to streamline and speed up the software development process. The resulting programs are thus a collection of different modules that cooperate: proving their safety and reliability is increasingly complex, requiring sound formal techniques, such as static program analysis. However, while teaching static analysis to master’s or PhD students, the predominant focus on theoretical concepts often leaves limited space for students to engage with the practical aspects of implementing static analyses and is limited to developing elementary ones. In this paper, we show how the infrastructure offered by LiSA can be exploited to learn how to implement advanced static analyses, such as string and relational numerical analyses, just focusing on their distinctive aspects. This would help to narrow the gap between theoretical and practical contents in static analysis courses, bringing the learning experience beyond the rudimentary implementation of static analyses to more sophisticated applications.

show abstract

Software verification challenges in the blockchain ecosystem

Olivieri,

Spoto

2024

Int J Softw Tools Technol Transfer

View full text Add to dashboard Cite

Blockchain technology has created a new software development context, with its own peculiarities, mainly due to the guarantees that the technology must satisfy, that is, immutability, distributability, and decentralization of data. Its rapid evolution over the last decade implied a lack of adequate verification tools, exposing developers and users to critical vulnerabilities and bugs. This paper clarifies the extent of block chain-oriented software (BoS), that goes well beyond smart contracts. Moreover, it provides an overview of the challenges related to software verification in the blockchain context, encompassing smart contracts, blockchain layers, cross-chain applications, and, more generally, BoS. This study aims to highlight the shortcomings of the state-of-art and of the state-of-practice of software verification in that context and identify, at the same time, new research directions.

show abstract

MichelsonLiSA: A Static Analyzer for Tezos

Cited by 6 publications

References 12 publications

Tarsis: An effective automata‐based abstract domain for string analysis

Tarsis: An effective automata‐based abstract domain for string analysis

Teaching Through Practice: Advanced Static Analysis with LiSA

Software verification challenges in the blockchain ecosystem

Contact Info

Product

Resources

About