VANDALIR: Vulnerability Analyses Based on Datalog and LLVM-IR

Schilling, Joschua; Müller, Tilo

doi:10.1007/978-3-031-09484-2_6

Cited by 3 publications

(2 citation statements)

References 17 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Much like general program analysis using IRs, vulnerability analysis experiments using IRs are limited to a small number of application and feasibility studies (Liang et al, 2016;Cassez et al, 2017;Fornaia et al, 2019;Schilling et al, 2022). While each study discovered relates directly to the problem in question, all outcomes thus far are limited to the detection of, at most, three types of software bugs.…”

Section: Ir In Static Vulnerability Analysismentioning

confidence: 99%

See 1 more Smart Citation

Static Vulnerability Analysis Using Intermediate Representations: A Literature Review

Spanier

Mahoney

2023

eccws

View full text Add to dashboard Cite

Analysis (SA) in Cybersecurity is a practice aimed at detecting vulnerabilities within the source code of a program. Modern SA applications, though highly sophisticated, lack programming language agnostic generalization, instead requiring codebase specific implementations for each programming language. The manner in which SA is implemented today, though functional, requires significant man hours to develop and maintain, higher costs due to custom applications for each language, and creates inconsistencies in implementation from SA-tool to SA-tool. A source of programming language generalization occurs within compilers. During the compilation process, source code is converted into a grammatically consistent Intermediate Representation (IR) (e.g. LLVM-IR) before being converted to an output format. The grammatical consistencies provided by the IR theoretically allow the same program written in different languages to be analyzed using the same mechanism. By using the IRs of compiled programming languages as the codebase of SA practices, multiple programming languages can be encompassed by a single SA tool. To begin understanding the possibilities the combination of SA and IRs may reveal, this research presents the following outcomes: 1) a systematic literature search, 2) a literature review, and 3) the classification of existing work pertaining to SA practices using IRs. The results of the study indicate that generalized Static Analysis using the LLVM IR is already a common practice in all compilers, but that the extended use of the LLVM IR in Cybersecurity SA practices aimed at finding vulnerabilities in source code remains underdeveloped.

show abstract

Section: Ir In Static Vulnerability Analysismentioning

confidence: 99%

“…According to Schilling et al (2022), custom built static vulnerability analysis tools are expensive, time-consuming, and inefficient. Many man-hours are required to develop, code, and maintain functionality for very limited, very specific applications.…”

Section: Vandalir: Ir-based Vulnerability Analysesmentioning

confidence: 99%