← All courses

CS 336 · Program Analysis for Security & Privacy

Spring 2026

Screenshot of TaintTrace

TaintTrace

Raul Cortinas, Lynda Levy, Baylor Wroblewski, Roman Dattilo

Static taint analysis in OCaml that flags SQL injection, XSS and command injection in IMP and Python code.

SiteSource

Screenshot of Taint Lite

Taint Lite

Justin Veltri, Flavia Daniels, Arnav Vasa, Garrett Boag, Jonathan Veltri

Privacy leak detector that tracks personal data from sources to sinks in IMP-Core and Python programs.

SiteSourceReport

Secret & Misconfiguration Scanner

Ziv Cohen, Zaccery Tarver, James Pazik, Matthew Keller

AST-based OCaml scanner that finds hardcoded secrets, high-entropy strings and insecure configuration.

Source