Scaling Software Security Analysis to Millions of Malicious Programs and Billions of Lines of Code