NASA-SW-VnV/ikos
Ikos
Ikos is a formal verification suite and static analysis framework designed to prove the absence of undefined behaviors and runtime errors in C and C++ source code. It functions as an abstract interpretation tool that approximates program execution to identify potential crashes and software defects.
The system utilizes a compiler front-end to translate source code into a specialized abstract representation. This process decouples language parsing from the analysis logic, allowing the framework to perform deep program analysis via a formal verification system.
The toolkit covers several analysis areas, including interprocedural control-flow analysis, constraint-based value analysis, and interval-based domain modeling. These capabilities enable the detection of specific memory errors such as buffer overflows and out-of-bounds accesses.
Features
- Formal Verification - Provides a comprehensive suite for formally proving that C and C++ source code adheres to safety properties.
- Abstract Interpretation Analysis - Uses mathematical models of program behavior to prove the absence of runtime errors like buffer overflows.
- Abstract Interpretation Frameworks - Implements a formal abstract interpretation framework to prove the absence of undefined behaviors and runtime errors.
- C/C++ Source Code Security Analysis - Analyzes C and C++ source code to detect software defects and runtime errors like buffer overflows.
- Formal Verification Frameworks - Offers a collection of analysis tools that apply mathematical logic to source code to prove the absence of runtime errors.
- Formal Verification Tools - Functions as a formal verification system that approximates program execution to prove the absence of undefined behaviors.
- Source Code IR Translators - Converts source code or bitcode into a specialized abstract representation to simplify the process of program analysis.
- Compiler Front-ends - Ships a translation layer that converts C and C++ source code into a specialized abstract representation for deep analysis.
- Constraint-Based Value Analysis - Tracks variable ranges and pointer offsets by solving systems of constraints during program traversal.
- Flow-Sensitive Analysis - Performs flow-sensitive analysis to track the state of variables along different execution paths across function boundaries.
- Intermediate Representation Translation - Converts C and C++ source code into a specialized abstract representation to decouple language parsing from analysis logic.
- Interval-Based Domain Modeling - Represents numeric values as ranges to detect potential buffer overflows and out of bounds memory accesses.
- Analysis IR Translators - Converts C and C++ code into a simplified abstract representation for more efficient automated program analysis.
- Soundness Verifiers - Provides a sound verification engine that ensures no potential runtime errors or undefined behaviors are missed during analysis.
- Binary Analysis - Analyzes C/C++ code using abstract interpretation.
- Static Analysis - Static analyzer based on abstract interpretation theory.
- Static Analysis Tools - Sound static analyzer for C/C++ code based on LLVM.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
