Verification of Web Software Based on String Analysis

点击翻译按钮获取中文摘要

We have improved a program analysis called string analysis that can be applied to the detection of Web software vulnerabilities in the following respects. The readability of counter examples generated by the analysis is improved by constructing them as context-free grammars in a specific form. We have formulated the semantics of regular expression matching in programming languages, and enabled their precise analysis through the precise translation to transducers. For the analysis of a server-side program utilizing a database, we have improved its analysis by analyzing the constraint on data imposed by the program storing the data.