Queue - Quality Assurance
Static analysis tools as early indicators of pre-release defect density
Proceedings of the 27th international conference on Software engineering
Hardware support for code integrity in embedded processors
Proceedings of the 2005 international conference on Compilers, architectures and synthesis for embedded systems
Perracotta: mining temporal API rules from imperfect traces
Proceedings of the 28th international conference on Software engineering
Roadmap for enhanced languages and methods to aid verification
Proceedings of the 5th international conference on Generative programming and component engineering
Thorough static analysis of device drivers
Proceedings of the 1st ACM SIGOPS/EuroSys European Conference on Computer Systems 2006
A framework for the static verification of api calls
Journal of Systems and Software
Flow-insensitive static analysis for detecting integer anomalies in programs
SE'07 Proceedings of the 25th conference on IASTED International Multi-Conference: Software Engineering
Hang analysis: fighting responsiveness bugs
Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer Systems 2008
Empirical Software Engineering
Verifying dereference safety via expanding-scope analysis
ISSTA '08 Proceedings of the 2008 international symposium on Software testing and analysis
The Verified Software Challenge: A Call for a Holistic Approach to Reliability
Verified Software: Theories, Tools, Experiments
Path projection for user-centered static analysis tools
Proceedings of the 8th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering
Formal methods: Practice and experience
ACM Computing Surveys (CSUR)
PAriCheck: an efficient pointer arithmetic checker for C programs
ASIACCS '10 Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security
A study of tool support for the evaluation of programming exercises
EUROCAST'07 Proceedings of the 11th international conference on Computer aided systems theory
IEEE Transactions on Very Large Scale Integration (VLSI) Systems
A decade of software model checking with SLAM
Communications of the ACM
Efficient and effective buffer overflow protection on ARM processors
WISTP'10 Proceedings of the 4th IFIP WG 11.2 international conference on Information Security Theory and Practices: security and Privacy of Pervasive Systems and Smart Devices
Runtime countermeasures for code injection attacks against C and C++ programs
ACM Computing Surveys (CSUR)
Improving Memory Management Security for C and C++
International Journal of Secure Software Engineering
CPM: Masking Code Pointers to Prevent Code Injection Attacks
ACM Transactions on Information and System Security (TISSEC)
Chucky: exposing missing checks in source code for vulnerability discovery
Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security
| Hi-index | 0.02 |
Correctness tools can improve software development by supplementing human shortcomings, detecting programming errors such as null-pointer dereferences, API usage errors, and failing to close file descriptors. Microsoft Research has developed two generations of correctness tools: The first are heuristic tools widely used inside the organization to find programming errors; the second are tools based on sound program analysis and driven by rules describing interface behavior. Together, these tools offer a systematic approach for finding and fixing errors early in the development process.