[rramadass]

> formal modeling of exploits, which is currently a very immature field.

Can you elaborate more on this with pointers to some resources?

[saagarjha]

I think a lot of work that went into mitigating Spectre has been a good example since it’s very easy to patch incorrectly if you don’t have a good model of the vulnerability and what it allows