Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Konstantinos Triantafyllou

dblp:205/6558 · DBLP profile ↗
← Back
2ranked-venue papers
0as first author
2since 2021 · last 2022
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Software engineering, systems software and programming languages · 2 · 2 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Blockchain and cryptocurrency security · 100%
Software engineering, system software, and programming languages
1 paper
Program analysis · 100%

Topics — the 4 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Blockchain and cryptocurrency security
smart contract security
0.512021
Symbolic value-flow static analysis: deep, precise, complete modeling of Ethereum smart contracts · Proc. ACM Program. Lang. 2021
Blockchain and cryptocurrency security › smart contract security
vulnerability detection
0.512021
Symbolic value-flow static analysis: deep, precise, complete modeling of Ethereum smart contracts · Proc. ACM Program. Lang. 2021
Program analysis
static analysis
0.512021
Symbolic value-flow static analysis: deep, precise, complete modeling of Ethereum smart contracts · Proc. ACM Program. Lang. 2021
Program analysis › data flow analysis
value-flow analysis
0.512021
Symbolic value-flow static analysis: deep, precise, complete modeling of Ethereum smart contracts · Proc. ACM Program. Lang. 2021

Methods — techniques the papers use, named apart from their topics

symbolic execution · 1.0static analysis fixpoint computation · 1.0craig interpolation · 1.0
YearPublicationVenuePosition
2022 Präzi: from package-based to call-based dependency networks
Joseph Hejderup, Moritz Beller, Konstantinos Triantafyllou, Georgios Gousios
Empir. Softw. Eng.3
2021 Symbolic value-flow static analysis: deep, precise, complete modeling of Ethereum smart contracts
abstract
We present a static analysis approach that combines concrete values and symbolic expressions. This symbolic value-flow (“symvalic”) analysis models program behavior with high precision, e.g., full path sensitivity. To achieve deep modeling of program semantics, the analysis relies on a symbiotic relationship between a traditional static analysis fixpoint computation and a symbolic solver: the solver does not merely receive a complex “path condition” to solve, but is instead invoked repeatedly (often tens or hundreds of thousands of times), in close cooperation with the flow computation of the analysis. The result of the symvalic analysis architecture is a static modeling of program behavior that is much more complete than symbolic execution, much more precise than conventional static analysis, and domain-agnostic: no special-purpose definition of anti-patterns is necessary in order to compute violations of safety conditions with high precision. We apply the analysis to the domain of Ethereum smart contracts. This domain represents a fundamental challenge for program analysis approaches: despite numerous publications, research work has not been effective at uncovering vulnerabilities of high real-world value. In systematic comparison of symvalic analysis with past tools, we find significantly increased completeness (shown as 83-96% statement coverage and more true error reports) combined with much higher precision, as measured by rate of true positive reports. In terms of real-world impact, since the beginning of 2021, the analysis has resulted in the discovery and disclosure of several critical vulnerabilities, over funds in the many millions of dollars. Six separate bug bounties totaling over $350K have been awarded for these disclosures.
Yannis Smaragdakis, Neville Grech, Sifis Lagouvardos, Konstantinos Triantafyllou, Ilias Tsatiris
Proc. ACM Program. Lang.4