Abstract: A computer-implemented static analysis system for binary executables and source code configured to detect vulnerabilities, undocumented features and other input program errors. The system uses a fuzzy logic engine to reduce a number of false positives and false negatives results. The system has a decompiler configured to receive a source code of an input program and represent the input program in a target low-level language code (LLC) intermediate representation (IR) and a frontend configured to receive a binary code representation of the input program and represent the input program in the target LLC IR. The system further has an analyzer configured to receive the target LLC IR and analyze the target LLC IR to detect vulnerabilities, undocumented features and input program errors using predetermined rules stored in a rule module and provided to the analyzer. The analyzer uses the fuzzy logic engine to receive substantially more accurate results.

Abstract: A computer-implemented static analysis system for binary executables and source code configured to detect vulnerabilities, undocumented features and other input program errors. The system uses a fuzzy logic engine to reduce a number of false positives and false negatives results. The system has a decompiler configured to receive a source code of an input program and represent the input program in a target low-level language code (LLC) intermediate representation (IR) and a frontend configured to receive a binary code representation of the input program and represent the input program in the target LLC IR. The system further has an analyzer configured to receive the target LLC IR and analyze the target LLC IR to detect vulnerabilities, undocumented features and input program errors using predetermined rules stored in a rule module and provided to the analyzer. The analyzer uses the fuzzy logic engine to receive substantially more accurate results.