Papers
Essays and articles for a wider audience.
Scientific 15Peer-reviewed papers in conferences and journals.
Publicistic
1 article
Finding bugs and vulnerabilities in the AI era — what’s changed?
AI increases code volume faster than verification quality, so it can ship more defects, not fewer. The article argues for wrapping AI around deterministic tools such as testing engines and static analyzers, with a curated feedback loop between them.
Scientific
15 papers
Review of Static Analyzer Service Models
Which service models can be used in static analyzers? Is it possible to develop model suitable for more use cases?
Systematization of abstractions for unified programming language and environment support in static code analyzers
The paper about classification of abstractions used in static analyzers.
Static analyzer debugging and quality assurance approaches
The paper about approaches used when testing static analysis frameworks.
Midair: An Intermediate Representation for Multi-purpose Program Analysis
The paper about the IR developed for Equid framework.
Effective translation of directed acyclic graphs to intermediate representation
How to make translation to intermediate representation more effective? I suggest a tiny improvement to typical DFS-based algorithm that improves performance.
Towards a Resident Static Analysis
The paper about Analysis Server Protocol used across Equid framework.
Equid – A Static Analysis Framework for Industrial Applications
A paper about my static analysis framework.
Windows Phone 7 full unlock architecture
A talk about Windows Phone 7 full unlock architecture.
Static analysis of RuC programs
A talk about architecture of static analysis for RuC programming language.
An approach to storing program semantics in static program analysis
A paper about NoSQL approach for storing semantic data plus mechanisms to unload unneeded data and reload when needed.
Scalable semantic virtual machine framework for language-agnostic static analysis
Virtual machine for static analysis and the mechanism to distribute the load across the cluster.
Design and testing of LXC-based virtualization system for resource-constrained MIPS devices
How would LXC-based containerization system work in real life? How does it compare to raw hosts? That's what the paper will tell you.
Applying MapReduce to static analysis
What if MapReduce model could be applied to static analysis? This paper describes how it can be done.
5W+ 1H Static Analysis Report Quality Measure
There are many good static analysis projects, but how comes not all of them are actually useful in real-world practice? This paper describes the concept of informational value in the defect report, which turns analysis results upside down.
Function context detection in the program source code
The first (naive) paper about static analysis and how to organize collection of execution contexts.