Fast Flow-Sensitive C Program Partitioning via Iterative Value-Flow Refinement

Software vulnerabilities that expose confidential data remain a persistent threat. Even vulnerabilities in unprivileged code can expose data in privileged code when they share memory. Program partitioning safeguards against this by dividing a monolithic program into component programs according to a security policy for sharing confidential data, following the Principle of Least Privilege: each component of a system should operate with minimum privileges.