Finding application errors and security flaws using PQL: a program query language

By Michael C. Martin, Benjamin Livshits, Monica S. Lam. Conference on Object-Oriented Programming Systems, Languages, and Applications, 2005

507 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Information Systems, Software

View Paper: https://www.semanticscholar.org/paper/0d1f5807a26286f8a486d7b535d5fc16bd37d86d

Citations in the corpus

A user-guided approach to program analysis (2015, unknown): “Datalog has been shown to suffice for expressing a variety of analyses, including pointer and call-graph analyses [7,40,41,44], concurrency analyses [30,31], security analyses [11,27], and reflection analysis [25].”
Mop: an efficient and generic runtime verification framework (2007, unknown): “Several runtime veriﬁcation systems follow this approach explicitly or implicitly, including Eagle/Hawk [23], Tracematches [2], and PQL[38].”
Sound and precise analysis of web applications for injection vulnerabilities (2007, unknown): “Static taint analyses [12, 18, 31] track the flow of tainted (i.”
DynaMine: finding common error patterns by mining software revision histories (2005, unknown): “PQL is a language that allows one to express and enforce API usage patterns [ 31 ].”
Semantic code search via equational reasoning (2020, unknown): “There are also several Datalog-based program analysis tools whose query engines may be used for code search [46, 83, 87].”
Boa: A language and infrastructure for analyzing ultra-large-scale software repositories (2013, unknown): “define a program query language (PQL) [23] to allow easily analyzing source code.”
Securify: Practical Security Analysis of Smart Contracts (2018, unknown): “Both [45] and our work have an underlying declarative solver for the static analysis.”
CryptDB: protecting confidentiality with encrypted query processing (2011, unknown): “Many tools help programmers either ﬁnd or mitigate mistakes in their code that may lead to vulnerabilities, including static analysis tools like PQL [29, 31] and UrFlow [7], and runtime tools like Resin [52] and CLAMP [36].”