ISSTA 2016
25th International Symposium on Software Testing and Analysis (ISSTA)
Powered by
Conference Publishing Consulting

25th International Symposium on Software Testing and Analysis (ISSTA), July 18–20, 2016, Saarbrücken, Germany

ISSTA 2016 – Proceedings

Contents - Abstracts - Authors


Title Page
Message from the Chairs
ISSTA 2016 Conference Organization
Message from Workshop Chairs
Summary of the Workshop DECAF 2014
Sponsors and Supporters

Research Papers

The Web
Mon, Jul 18, 10:10 - 11:00

DEKANT: A Static Analysis Tool That Learns to Detect Web Application Vulnerabilities
Ibéria Medeiros, Nuno Neves, and Miguel Correia
(University of Lisbon, Portugal; INESC-ID, Portugal; LaSIGE, Portugal)
Automated and Effective Testing of Web Services for XML Injection Attacks
Sadeeq Jan, Cu D. Nguyen, and Lionel C. BriandORCID logo
(University of Luxembourg, Luxembourg)

Static Analysis
Mon, Jul 18, 11:20 - 13:00

Binary Code Is Not Easy
Xiaozhu Meng and Barton P. Miller
(University of Wisconsin-Madison, USA)
Specification of Concretization and Symbolization Policies in Symbolic Execution
Robin David, Sébastien BardinORCID logo, Josselin Feist, Laurent Mounier, Marie-Laure Potet, Thanh Dinh Ta, and Jean-Yves Marion ORCID logo
(CEA LIST, France; VERIMAG, France; University of Lorraine, France; CNRS, France; LORIA, France)
EagerMerge: An Optimistic Technique for Efficient Points-To Analysis
Sudhir Samrit and Rupesh Nasre
(IIT Madras, India)
IPA: Improving Predictive Analysis with Pointer Analysis
Peng Liu, Omer Tripp, and Xiangyu ZhangORCID logo
(Purdue University, USA; IBM Research, USA; Google, USA)

Test Generation
Mon, Jul 18, 14:00 - 15:40

Generating Focused Random Tests using Directed Swarm Testing
Mohammad Amin Alipour, Alex GroceORCID logo, Rahul Gopinath, and Arpit Christi
(Oregon State University, USA)
Monkey See, Monkey Do: Effective Generation of GUI Tests with Inferred Macro Events
Markus Ermuth and Michael Pradel ORCID logo
(TU Darmstadt, Germany)
Sapienz: Multi-objective Automated Testing for Android Applications
Ke Mao, Mark HarmanORCID logo, and Yue Jia
(University College London, UK)
Video Info
FSX: Fine-Grained Incremental Unit Test Generation for C/C++ Programs
Hiroaki Yoshida, Susumu Tokumoto, Mukul R. Prasad, Indradeep Ghosh, and Tadahiro Uehara
(Fujitsu Labs, USA; Fujitsu Labs, Japan)

Testing Processes
Mon, Jul 18, 16:00 - 17:40

CSNIPPEX: Automated Synthesis of Compilable Code Snippets from Q&A Sites
Valerio Terragni, Yepang Liu, and Shing-Chi CheungORCID logo
(Hong Kong University of Science and Technology, China)
Automatic Test Case Generation: What If Test Code Quality Matters?
Fabio PalombaORCID logo, Annibale Panichella ORCID logo, Andy Zaidman, Rocco OlivetoORCID logo, and Andrea De LuciaORCID logo
(University of Salerno, Italy; Delft University of Technology, Netherlands; University of Molise, Italy)
Analyzing Test Completeness for Dynamic Languages
Christoffer Quist Adamsen, Gianluca Mezzetti, and Anders MøllerORCID logo
(Aarhus University, Denmark)
Info aec-badge-issta
Unveiling Anomalies and Their Impact on Software Quality in Model-Based Automotive Software Revisions with Software Metrics and Domain Experts
Jan Schroeder, Christian Berger, Miroslaw Staron, Thomas Herpel, and Alessia Knauss
(University of Gothenburg, Sweden; Automotive Safety Technologies, Germany; Chalmers University of Technology, Sweden)

Debugging and Repair
Tue, Jul 19, 11:20 - 13:00

Practitioners' Expectations on Automated Fault Localization
Pavneet Singh Kochhar, Xin Xia, David LoORCID logo, and Shanping Li ORCID logo
(Singapore Management University, Singapore; Zhejiang University, China)
A Learning-to-Rank Based Fault Localization Approach using Likely Invariants
Tien-Duy B. Le, David LoORCID logo, Claire Le GouesORCID logo, and Lars GrunskeORCID logo
(Singapore Management University, Singapore; Carnegie Mellon University, USA; Humboldt University of Berlin, Germany)
Optimal Sanitization Synthesis for Web Application Vulnerability Repair
Fang Yu, Ching-Yuan Shueh, Chun-Han Lin, Yu-Fang Chen, Bow-Yaw Wang ORCID logo, and Tevfik BultanORCID logo
(National Chengchi University, Taiwan; Academia Sinica, Taiwan; University of California at Santa Barbara, USA)
ARROW: Automated Repair of Races on Client-Side Web Pages
Weihang Wang, Yunhui Zheng, Peng Liu, Lei Xu ORCID logo, Xiangyu ZhangORCID logo, and Patrick Eugster
(Purdue University, USA; IBM Research, USA; Nanjing University, China)

Tue, Jul 19, 14:00 - 15:40

Automatic Generation of Oracles for Exceptional Behaviors
Alberto Goffi, Alessandra GorlaORCID logo, Michael D. ErnstORCID logo, and Mauro PezzèORCID logo
(University of Lugano, Switzerland; IMDEA Software Institute, Spain; University of Washington, USA)
Verdict Machinery: On the Need to Automatically Make Sense of Test Results
Mikael Fagerström, Emre Emir Ismail, Grischa Liebel, Rohit Guliani, Fredrik Larsson, Karin Nordling, Eric Knauss, and Patrizio Pelliccione
(Chalmers University of Technology, Sweden; University of Gothenburg, Sweden; Ericsson, Sweden)
Testing Stochastic Software using Pseudo-Oracles
Matthew Patrick, Andrew P. Craig, Nik J. Cunniffe, Matthew Parry, and Christopher A. Gilligan
(University of Cambridge, UK; University of Otago, New Zealand)
Test Oracle Assessment and Improvement
Gunel Jahangirova, David Clark ORCID logo, Mark HarmanORCID logo, and Paolo Tonella
(Fondazione Bruno Kessler, Italy; University College London, UK)

Program Understanding
Tue, Jul 19, 16:00 - 17:40

DSI: An Evidence-Based Approach to Identify Dynamic Data Structures in C Programs
David H. White, Thomas Rupprecht, and Gerald Lüttgen
(University of Bamberg, Germany)
Documenting Database Usages and Schema Constraints in Database-Centric Applications
Mario Linares-Vásquez, Boyang Li, Christopher Vendome, and Denys PoshyvanykORCID logo
(College of William and Mary, USA; Universidad de los Andes, Colombia)
Exploring Regular Expression Usage and Context in Python
Carl Chapman and Kathryn T. StoleeORCID logo
(Iowa State University, USA; North Carolina State University, USA)
Toward Understanding Compiler Bugs in GCC and LLVM
Chengnian Sun, Vu Le, Qirun Zhang, and Zhendong Su
(University of California at Davis, USA)

Wed, Jul 20, 08:50 - 09:40

Semantic Modelling of Android Malware for Effective Malware Comprehension, Detection, and Classification
Guozhu Meng, Yinxing Xue, Zhengzi Xu, Yang Liu ORCID logo, Jie Zhang, and Annamalai Narayanan
(Nanyang Technological University, Singapore)
DroidRA: Taming Reflection to Support Whole-Program Analysis of Android Apps
Li Li, Tegawendé F. Bissyandé ORCID logo, Damien Octeau, and Jacques KleinORCID logo
(University of Luxembourg, Luxembourg; Pennsylvania State University, USA)

Mutation Testing
Wed, Jul 20, 10:10 - 11:25

Mutation-Aware Fault Prediction
David Bowes, Tracy Hall, Mark Harman, Yue Jia, Federica SarroORCID logo, and Fan Wu
(University of Hertfordshire, UK; Brunel University London, UK; University College London, UK)
Predictive Mutation Testing
Jie Zhang, Ziyi Wang, Lingming Zhang, Dan Hao, Lei Zang, Shiyang Cheng, and Lu Zhang ORCID logo
(Peking University, China; University of Texas at Dallas, USA)
Threats to the Validity of Mutation-Based Test Assessment
Mike Papadakis, Christopher Henard, Mark HarmanORCID logo, Yue Jia, and Yves Le Traon
(University of Luxembourg, Luxembourg; University College London, UK)

Wed, Jul 20, 11:45 - 13:00

Efficient Race Detection in the Presence of Programmatic Event Loops
Anirudh Santhiar, Shalini Kaleeswaran, and Aditya Kanade
(Indian Institute of Science, India)
Automatically Verifying and Reproducing Event-Based Races in Android Apps
Yongjian Hu, Iulian Neamtiu, and Arash Alavi
(University of California at Riverside, USA; New Jersey Institute of Technology, USA)
SyncProf: Detecting, Localizing, and Optimizing Synchronization Bottlenecks
Tingting Yu and Michael Pradel ORCID logo
(University of Kentucky, USA; TU Darmstadt, Germany)

Wed, Jul 20, 14:00 - 15:15

Zero-Overhead Profiling via EM Emanations
Robert Callan, Farnaz Behrang, Alenka Zajic, Milos Prvulovic, and Alessandro OrsoORCID logo
(Georgia Tech, USA)
Efficient Flow Profiling for Detecting Performance Bugs
Rashmi Mudduluru and Murali Krishna Ramanathan
(Indian Institute of Science, India)
Energy-Aware Test-Suite Minimization for Android Apps
Reyhaneh Jabbarvand, Alireza Sadeghi, Hamid Bagheri, and Sam MalekORCID logo
(University of California at Irvine, USA)

Demonstration Papers

COSTOTest: A Tool for Building and Running Test Harness for Service-Based Component Models (Demo)
Pascal André, Jean-Marie Mottu, and Gerson Sunyé ORCID logo
(LINA, France; University of Nantes, France; Inria, France; Mines Nantes, France)
ASTOR: A Program Repair Library for Java (Demo)
Matias Martinez and Martin Monperrus
(University of Lugano, Switzerland; University of Lille, France; Inria, France)
Jolinar: Analysing the Energy Footprint of Software Applications (Demo)
Adel Noureddine, Syed Islam, and Rabih Bashroush
(University of East London, UK)
PIT: A Practical Mutation Testing Tool for Java (Demo)
Henry Coles, Thomas Laurent, Christopher Henard, Mike Papadakis, and Anthony Ventresque ORCID logo
(NCR, UK; Lero, Ireland; University College Dublin, Ireland; École Centrale de Nantes, France; University of Luxembourg, Luxembourg)

proc time: 0.75