NASA-SW-VnV/ikos
Ikos
Ikos is a formal verification suite and static analysis framework designed to prove the absence of undefined behaviors and runtime errors in C and C++ source code. It functions as an abstract interpretation tool that approximates program execution to identify potential crashes and software defects.
The system utilizes a compiler front-end to translate source code into a specialized abstract representation. This process decouples language parsing from the analysis logic, allowing the framework to perform deep program analysis via a formal verification system.
The toolkit covers several analysis areas, including interprocedural control-flow analysis, constraint-based value analysis, and interval-based domain modeling. These capabilities enable the detection of specific memory errors such as buffer overflows and out-of-bounds accesses.
Features
- Formal Verification - Provides a comprehensive suite for formally proving that C and C++ source code adheres to safety properties.
- Abstract Interpretation Analysis - Uses mathematical models of program behavior to prove the absence of runtime errors like buffer overflows.
- Abstract Interpretation Frameworks - Implements a formal abstract interpretation framework to prove the absence of undefined behaviors and runtime errors.
- C/C++ Source Code Security Analysis - Analyzes C and C++ source code to detect software defects and runtime errors like buffer overflows.
- Formal Verification Frameworks - Offers a collection of analysis tools that apply mathematical logic to source code to prove the absence of runtime errors.
- Formal Verification Tools - Functions as a formal verification system that approximates program execution to prove the absence of undefined behaviors.
- Source Code IR Translators - Converts source code or bitcode into a specialized abstract representation to simplify the process of program analysis.
- Compiler Front-ends - Ships a translation layer that converts C and C++ source code into a specialized abstract representation for deep analysis.
- Constraint-Based Value Analysis - Tracks variable ranges and pointer offsets by solving systems of constraints during program traversal.
- Flow-Sensitive Analysis - Performs flow-sensitive analysis to track the state of variables along different execution paths across function boundaries.
- Intermediate Representation Translation - Converts C and C++ source code into a specialized abstract representation to decouple language parsing from analysis logic.
- Interval-Based Domain Modeling - Represents numeric values as ranges to detect potential buffer overflows and out of bounds memory accesses.
- Analysis IR Translators - Converts C and C++ code into a simplified abstract representation for more efficient automated program analysis.
- Soundness Verifiers - Provides a sound verification engine that ensures no potential runtime errors or undefined behaviors are missed during analysis.
- Binary Analysis - Analyzes C/C++ code using abstract interpretation.
- Static Analysis - Static analyzer based on abstract interpretation theory.
- Static Analysis Tools - Sound static analyzer for C/C++ code based on LLVM.
