Abstract: Security vulnerability of software is a serious threat for information security. Static： analysis can find security vulnerabilities by automatically deriving information about the behavior of software. Comparing with other program analysis methods, static

Key words: Security vulnerability, Static analysis, Abstract interpretation, Type inference, Dataflow analysis, Constraint analysis, Information security