Skip to main content

Algorithmic Verification of String Manipulating Programs

Objective

String is among the most fundamental and commonly used data types in virtually all modern programming languages, especially with the rapidly growing popularity of scripting languages (e.g. JavaScript and Python). Programs written in such languages tend to perform heavy string manipulations, which are complex to reason about and could easily lead to programming mistakes. In some cases, such mistakes could have serious consequences, e.g. in the case of client-side web applications, cross-site scripting (XSS) attacks that could lead to a security breach by a malicious user.

The central objective of the proposed project is to develop novel verification algorithms for analysing the correctness (esp. with respect to safety and termination properties) of programs with string variables, and transform them into robust verification tools. To meet this key objective, we will make fundamental breakthroughs on both theoretical and tool implementation challenges. On the theoretical side, we address two important problems: (1) design expressive constraint languages over strings (in combination with other data types like integers) that permit decidability with good complexity, and (2) design generic semi-algorithms for verifying string programs that have strong theoretical performance guarantee. On the implementation side, we will address the challenging problem of designing novel implementation methods that can substantially speed up the basic string analysis procedures in practice. Finally, as a proof of concept, we will apply our technologies to two key application domains: (1) automatic detection of XSS vulnerabilities in web applications, and (2) automatic grading systems for a programming course.

The project will not only make fundamental theoretical contributions — potentially solving long-standing open problems in the area — but also yield powerful methods that can be used in various applications.

Host institution

TECHNISCHE UNIVERSITAT KAISERSLAUTERN
Net EU contribution
€ 1 332 075,00
Address
Gottlieb Daimler Strasse
67663 Kaiserslautern
Germany

See on map

Region
Rheinland-Pfalz Rheinhessen-Pfalz Kaiserslautern, Kreisfreie Stadt
Activity type
Higher or Secondary Education Establishments
Other funding
€ 0,00

Beneficiaries (2)

TECHNISCHE UNIVERSITAT KAISERSLAUTERN
Germany
Net EU contribution
€ 1 332 075,00
Address
Gottlieb Daimler Strasse
67663 Kaiserslautern

See on map

Region
Rheinland-Pfalz Rheinhessen-Pfalz Kaiserslautern, Kreisfreie Stadt
Activity type
Higher or Secondary Education Establishments
Other funding
€ 0,00
THE CHANCELLOR, MASTERS AND SCHOLARS OF THE UNIVERSITY OF OXFORD

Participation ended

United Kingdom
Net EU contribution
€ 164 612,00
Address
Wellington Square University Offices
OX1 2JD Oxford
Region
South East (England) Berkshire, Buckinghamshire and Oxfordshire Oxfordshire
Activity type
Higher or Secondary Education Establishments
Other funding
€ 0,00