Publication

Seed Selection for Successful Fuzzing

Publications associées (31)

Improving systems software security through program analysis and instrumentation

Security and reliability bugs are prevalent in systems software. Systems code is often written in low-level languages like C/C++, which offer many benefits but also delegate memory management and type safety to programmers. This invites bugs that cause cra ...

EPFL2016

Techniques for Detection, Root Cause Diagnosis, and Classification of In-Production Concurrency Bugs

Baris Can Cengiz Kasikci

Concurrency bugs are at the heart of some of the worst bugs that plague software. Concurrency bugs slow down software development because it can take weeks or even months before developers can identify and fix them. In-production detection, root cause ...

EPFL2015

Techniques for Identifying Elusive Corner-Case Bugs in Systems Software

Radu Banabic

Modern software is plagued by elusive corner-case bugs (e.g., security bugs). Because there are no scalable, automated ways of finding them, such bugs can remain hidden until software is deployed in production. This thesis proposes approaches to solve this ...

EPFL2015

Automatic target validation based on neuroscientific literature mining for tractography

Jean-Cédric Chappelier, Sean Lewis Hill, Renaud Luc Richardet, David Slater, Xavier Vasques, Bogdan Draganski, Jocelyne Bloch

Target identification for tractography studies requires solid anatomical knowledge validated by an extensive literature review across species for each seed structure to be studied. Manual literature review to identify targets for a given seed region is ted ...

Frontiers Research Foundation2015

Execution Synthesis: A Technique for Automating the Debugging of Software

Cristian Zamfir

Debugging real systems is hard, requires deep knowledge of the target code, and is time-consuming. Bug reports rarely provide sufficient information for debugging, thus forcing developers to turn into detectives searching for an explanation of how the prog ...

EPFL2013

Efficient State Merging in Symbolic Execution

George Candea, Stefan Bucur, Volodymyr Kuznetsov, Johannes Kinder

Symbolic execution has proven to be a practical technique for building automated test case generation and bug finding tools. Nevertheless, due to state explosion, these tools still struggle to achieve scalability. Given a program, one way to reduce the num ...

ACM2012

Efficient State Merging in Symbolic Execution

George Candea, Stefan Bucur, Volodymyr Kuznetsov, Johannes Kinder

Assoc Computing Machinery2012

Fast black-box testing of system recovery code

George Candea, Radu Banabic

Fault injection-a key technique for testing the robustness of software systems-ends up rarely being used in practice, because it is labor-intensive and one needs to choose between performing random injections (which leads to poor coverage and low represent ...

2012

Efficient Testing of Recovery Code Using Fault Injection

George Candea, Paul Dan Marinescu

A critical part of developing a reliable software system is testing its recovery code. This code is traditionally difficult to test in the lab, and, in the field, it rarely gets to run; yet, when it does run, it must execute flawlessly in order to recover ...

2011

Striking a New Balance Between Program Instrumentation and Debugging Time

Olivier Crameri, Willy Zwaenepoel, Ricardo Bianchini

Although they are helpful in many cases, state-of-the-art bug reporting systems may impose excessive overhead on users, leak private information, or provide little help to the developer in locating the problem. In this paper, we explore a new approach to b ...

Acm Order Department, P O Box 64145, Baltimore, Md 21264 Usa2011

Parallel symbolic execution for automated real-world software testing

George Candea, Cristian Zamfir, Stefan Bucur, Vlad Ureche

This paper introduces Cloud9, a platform for automated testing of real-world software. Our main contribution is the scalable parallelization of symbolic execution on clusters of commodity hardware, to help cope with path explosion. Cloud9 provides a system ...

ACM Press2011