Compiler compilers are in widespread use, but decompiler compilers are a more novel concept. This paper sets out a technique for the decompilation of object code back to source code, and describes a working decompiler generator. Existing and potential applications include reverse engineering, quality assessment, debugging and safety-critical code validation or veri cation.

General definitions as well as rules of reasoning regarding control code production, distribution, deployment, and usage are described. The role of testing, trust, confidence and risk analysis is considered. A rationale for control code testing is sought and found, for the case of safety critical embedded control code.

0 7 4 0 7 4 5 9 / 0 3 / $ 1 7 . 0 0 © 2 0 0 3 I E E E damage. But even if the software does exactly what it was specified to do, it still might not be safe if the operation scenario was unknown or not previously evaluated.1 The verification of all important aspects of safety-critical systems is obligatory, because it can save human lives and material resources.2 An important part of safety anal...

Violating a program’s semantics for fun and profit is a time honored hacker tradition. Compilers defend against such fiends by inserting run-time checks to enforce semantic safety properties. Safe language compilers insert type checks for down-casts, information flow compilers [11] add run-time checks to prevent information leakage, and tools like SAFECode [8], WIT [1], and DFI [6] insert run-t...

The Fire Safety Evaluation System (FSES) for Health Care Facilities [1] was the first of a series of FSES documents covering a variety of types of occupancies including apartment buildings [2], prisons and jails [3], office and laboratory buildings [4], overnight accommodations in National Parks [5], and board and care facilities [6]. These have provided means for meeting or exceeding the level...

Type safety is a promising approach to enhancing software security. Programs written in type-safe programming languages such as Java are type-safe by construction. However, in practice, many complex applications are heterogeneous, i.e., they contain components written in different languages. The Java Native Interface (JNI) allows type-safe Java code to interact with unsafe C code. When a type-s...

Although several studies have investigated the effect of degradation on the behavior of structures, investigations on collapse margin ratios are rare in the literature. In this study, the effect of strength and stiffness degradation on collapse capacity of steel moment frames is investigated. The aim is to determine margin of safety against collapse using a probabilistic approach. For this reas...

We believe that fundamental to the establishment of a grid computing framework where all (not just large organizations) are able to effectively tap into the resources available on the global network is the establishment of trust between grid application developers and resource donors. Resource donors must be able to trust that their security, safety, and privacy policies will be respected by pr...

Model-driven software development (MDD) is seen as a promising approach to improve software quality and reduce production costs significantly. However, one of the problems in using MDD especially in the area of safety-critical systems is the lack of verified transformations. The verification of crucial safety properties on the model level is only really useful, if the automatic code generation ...