Towards practical reactive security audit using extended static checkers [pdf]research.microsoft.com1 pointlelf12 years ago