Home

Person

George Candea

About
Privacy
Disclaimer

Graph Chatbot

Related publications (68)

Parallel symbolic execution on cluster of commodity hardware

George Candea, Cristian Zamfir, Stefan Bucur

A symbolic execution task is dynamically divided among multiple computing nodes. Each of the multiple computing nodes explores a different portion of a same symbolic execution tree independently of other computing nodes. Workload status updates are receive ...

2014

Code-Pointer Integrity

George Candea, Volodymyr Kuznetsov, Mathias Josef Payer

Systems code is often written in low-level languages like C/C++, which offer many benefits but also delegate memory management to programmers. This invites memory safety bugs that attackers can exploit to divert control flow and compromise the system. Depl ...

2014

Finding Trojan Message Vulnerabilities in Distributed Systems

Rachid Guerraoui, George Candea, Radu Banabic

Trojan messages are messages that seem correct to the receiver but cannot be generated by any correct sender. Such messages constitute major vulnerability points of a distributed system---they constitute ideal targets for a malicious actor and facilitate f ...

ACM2014

Prototyping Symbolic Execution Engines for Interpreted Languages

George Candea, Stefan Bucur, Johannes Kinder

Symbolic execution is being successfully used to automatically test statically compiled code. However, increasingly more systems and applications are written in dynamic interpreted languages like Python. Building a new symbolic execution engine is a monume ...

ACM2014

The Tests-versus-Proofs Conundrum

George Candea

Ieee Computer Soc2014

Advantageous State Merging During Symbolic Analysis

George Candea, Stefan Bucur, Volodymyr Kuznetsov, Johannes Kinder

A determination is made regarding whether to merge two symbolic analysis states. A first state corresponds to a first path through a program to a program location and a second state corresponds to a second path through the program to the program location. ...

2013

Automated Debugging for Arbitrarily Long Executions

George Candea, Cristian Zamfir, Baris Can Cengiz Kasikci, Johannes Kinder, Edouard Bugnion

One of the most energy-draining and frustrating parts of software development is playing detective with elusive bugs. In this paper we argue that automated post-mortem debugging of failures is feasible for real, in-production systems with no runtime record ...

2013

Making Automated Testing of Cloud Applications an Integral Component of PaaS

George Candea, Stefan Bucur, Johannes Kinder

Traditional testing is inadequate for the complexity of modern cloud application software stacks. While the platform-as-a-service (PaaS) model has streamlined application development and deployment, its multiple abstraction layers and dependencies have mad ...

2013

-Overify: Optimizing Programs for Fast Verification

Jonas Benedict Wagner, George Candea, Volodymyr Kuznetsov

Developers rely on automated testing and verification tools to gain confidence in their software. The input to such tools is often generated by compilers that have been designed to generate code that runs fast, not code that can be verified easily and quic ...

USENIX Association2013

Mitigating Anonymity Challenges in Automated Testing and Debugging Systems

George Candea, Silviu Andrica

Modern software often provides automated testing and bug reporting facilities that enable developers to improve the software after release. Alas, this comes at the cost of user anonymity: reported execution traces may identify users. We present a way to mi ...

2013

Lightweight Snapshots and System-level Backtracking

Vitaly Chipounov, George Candea, Edouard Bugnion

We propose a new system-level abstraction, the lightweight immutable execution snapshot, which combines the immutable characteristics of checkpoints with the direct integration into the virtual memory subsystem of standard mutable address spaces. The abstr ...

USENIX2013

System and method for in-vivo multi-path analysis of binary software

Vitaly Chipounov, George Candea, Volodymyr Kuznetsov

A system and method for in-vivo multi-path analysis and testing of binary software including binary device drivers is disclosed. The system and method may be used to test a binary software system and may comprise a virtual machine, a symbolic execution eng ...

2012

Data Races vs. Data Race Bugs: Telling the Difference with Portend

George Candea, Cristian Zamfir, Baris Can Cengiz Kasikci

Even though most data races are harmless, the harmful ones are at the heart of some of the worst concurrency bugs. Alas, spotting just the harmful data races in programs is like finding a needle in a haystack: 76%-90% of the true data races reported by sta ...

Acm Order Department, P O Box 64145, Baltimore, Md 21264 Usa2012

The S2E Platform: Design, Implementation, and Applications

Vitaly Chipounov, George Candea, Volodymyr Kuznetsov

This article presents S2E, a platform for analyzing the properties and behavior of software systems, along with its use in developing tools for comprehensive performance profiling, reverse engineering of proprietary software, and automated testing of kerne ...

2012

Fast black-box testing of system recovery code

George Candea, Radu Banabic

Fault injection-a key technique for testing the robustness of software systems-ends up rarely being used in practice, because it is labor-intensive and one needs to choose between performing random injections (which leads to poor coverage and low represent ...

2012

Efficient State Merging in Symbolic Execution

George Candea, Stefan Bucur, Volodymyr Kuznetsov, Johannes Kinder

Symbolic execution has proven to be a practical technique for building automated test case generation and bug finding tools. Nevertheless, due to state explosion, these tools still struggle to achieve scalability. Given a program, one way to reduce the num ...

ACM2012

Efficient State Merging in Symbolic Execution

George Candea, Stefan Bucur, Volodymyr Kuznetsov, Johannes Kinder

Assoc Computing Machinery2012

CoRD: A Collaborative Framework for Distributed Data Race Detection

George Candea, Cristian Zamfir, Baris Can Cengiz Kasikci

Modern concurrent software is riddled with data races and these races constitute the source of many problems. Data races are hard to detect accurately before software is shipped and, once they cause failures in production, developers find it challenging to ...

Usenix2012

Automated Vulnerability Discovery in Distributed Systems

Rachid Guerraoui, George Candea, Radu Banabic

In this paper we present a technique for automatically assessing the amount of damage a small number of participant nodes can inﬂict on the overall performance of a large distributed system. We propose a feedback-driven tool that synthesizes malicious node ...

2011

Platform-wide Deadlock Immunity for Mobile Phones

George Candea, Thomas Rensch, Horatiu Jula

We present an implementation of our deadlock immunity system, Dimmunix, for mobile phone software. Within Android 2.2 OS, we modiﬁed Dalvik VM, the JVM running all the Android applications, to provide platform-wide deadlock immunity. We successfully ran th ...

2011

Page 2 of 4