Abstract: A system and method for authorization policy validation. A validator takes as input an authorization policy to be analyzed and a schema that specifies entity types and their attributes, types of entity parents in an entity hierarchy, and which entity types can be used with which actions. The validator checks that the policy conforms to the schema. If the check passes, then the policy is guaranteed to be free of both type errors and attribute access errors for any input that conforms to the schema.

Abstract: A graph structure provides a representation of source code and includes a plurality of nodes to represent a plurality of pointers within the source code, a plurality of type edges connecting nodes in the plurality of nodes within the graph structure (to identify a flow of a program to be implemented using the source code), and a plurality of checked edges based on respective usage of pointers in the plurality of pointers. A system determines, from the graph structure, whether one or more of the plurality of pointers comprise wild pointers based on one or more of the plurality of checked edges, and further determines, from the graph structure, pointer types for at least a portion of the plurality of pointers based on one or more of the plurality of type edges.

Abstract: In one embodiment, an application programming interface (API) and machine code associated with a software library are accessed. Data sources and data sinks in the software library are identified based on the API, and a data flow among the data sources and data sinks is determined based on a dynamic analysis of the machine code associated with the software library. A flow graph associated with the software library is then generated to represent the data flow among the data sources and data sinks, and a source code model associated with the software library is generated based on the flow graph.