Software Engineering Institute

This work is developing an algorithm to automatically infer the bounds of memory regions intended to be accessible via specific pointer variables and repair certain memory-related defects in software. The results of the work will help the DoD improve

• software assurance of existing source code at a fraction of the cost of a manual inspection and repair
• evaluation of high-risk legacy binary software in its sustainment centers, which cannot be evaluated or fixed with existing tools
• analysis of malware code that would substantially improve the efficiency of DoD and National Security Agency (NSA) malware analysts