[TextBook] Language-Based Engineering: A Comprehensive Approach to Software Analysis and Hardening

This book explores dynamic analysis and hardening in the context of software security and engineering.

• Ch1. Coverage
  • Reference: Hardhat Coverage
• Ch2. Buffer Overrun: Address Sanitizer
  • Reference: AddressSanitizer: A Fast Address Sanity Checker
• Ch3. Fuzzing
  • Reference: AFL
• Ch4. Symbolic Execution
  • Reference: KLEE
• Ch5. Delta Debugging
  • References:
    • Simplifying and Isolating Failure-Inducing Input
    • Yesterday, my program worked. Today, it does not. Why?
• Ch6. LLM-based Synthesis
  • Reference: Fuzz4All: Universal Fuzzing with Large Language Models
• Ch7. Data Race Detector: Thread Sanitizer
  • References:
    • Time, Clocks, and the Ordering of Events in a Distributed System
    • Eraser: A Dynamic Data Race Detector for Multithreaded Programs

Environment

• Nix: The build environment (LLVM, gtest) is available through the Nix shell, while the Rust environment (Cargo, rustc) utilizes the host environment.
• How to build: Type just b
• How to test: Type just t

Book Download

Latest version of the book is available at here

Auther

Hyunsoo Shin (신현수)