ISSTA 2023 – Proceedings

Frontmatter

Papers

CydiOS: A Model-Based Testing Framework for iOS Apps
Shuohan Wu, Jianfeng Li, Hao Zhou, Yongsheng Fang, Kaifa Zhao, Haoyu Wang, Chenxiong Qian, and Xiapu Luo
(Hong Kong Polytechnic University, China; Xi’an Jiaotong University, China; Beijing University of Posts and Telecommunications, China; Huazhong University of Science and Technology, China; University of Hong Kong, China)

Publisher's Version Published Artifact Artifacts Available

Improving Bit-Blasting for Nonlinear Integer Constraints
Fuqi Jia, Rui Han, Pei Huang, Minghao Liu, Feifei Ma, and Jian Zhang
(Institute of Software at Chinese Academy of Sciences, China; University of Chinese Academy of Sciences, China; Stanford University, USA)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

CONCORD: Clone-Aware Contrastive Learning for Source Code
Yangruibo Ding, Saikat Chakraborty, Luca Buratti, Saurabh Pujar, Alessandro Morari, Gail Kaiser, and Baishakhi Ray
(Columbia University, USA; Microsoft Research, USA; IBM Research, USA)

Publisher's Version

Towards Efficient Fine-Tuning of Pre-trained Code Models: An Experimental Study and Beyond
Ensheng Shi, Yanlin Wang, Hongyu Zhang, Lun Du, Shi Han, Dongmei Zhang, and Hongbin Sun
(Xi’an Jiaotong University, China; Sun Yat-sen University, China; Chongqing University, China; Microsoft, China)

Publisher's Version

Understanding and Tackling Label Errors in Deep Learning-Based Vulnerability Detection (Experience Paper)
Xu Nie, Ningke Li, Kailong Wang, Shangguang Wang, Xiapu Luo, and Haoyu Wang
(Huazhong University of Science and Technology, China; Beijing University of Posts and Telecommunications, China; Hong Kong Polytechnic University, China)

Publisher's Version

Pattern-Based Peephole Optimizations with Java JIT Tests
Zhiqiang Zang, Aditya Thimmaiah, and Milos Gligoric
(University of Texas at Austin, USA)

Publisher's Version

Icicle: A Re-designed Emulator for Grey-Box Firmware Fuzzing
Michael Chesser, Surya Nepal, and Damith C. Ranasinghe
(University of Adelaide, Australia; CSIRO’s Data61, Australia)

Publisher's Version

Fine-Grained Code Clone Detection with Block-Based Splitting of Abstract Syntax Tree
Tiancheng Hu, Zijing Xu, Yilin Fang, Yueming Wu, Bin Yuan, Deqing Zou, and Hai Jin
(Huazhong University of Science and Technology, China; Nanyang Technological University, Singapore)

Publisher's Version

Reducing the Memory Footprint of IFDS-Based Data-Flow Analyses using Fine-Grained Garbage Collection
Dongjie He, Yujiang Gui, Yaoqing Gao, and Jingling Xue
(UNSW, Australia; Huawei Toronto Research Center, Canada)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

Hybrid Inlining: A Framework for Compositional and Context-Sensitive Static Analysis
Jiangchao Liu, Jierui Liu, Peng Di, Diyu Wu, Hengjie Zheng, Alex X. Liu, and Jingling Xue
(Ant Group, China; ByteDance, China; UNSW, Australia)

Publisher's Version

Green Fuzzing: A Saturation-Based Stopping Criterion using Vulnerability Prediction
Stephan Lipp, Daniel Elsner, Severin Kacianka, Alexander Pretschner, Marcel Böhme, and Sebastian Banescu
(TU Munich, Germany; MPI-SP, Germany; Monash University, Australia)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

Testing Graph Database Engines via Query Partitioning
Matteo Kamm, Manuel Rigger, Chengyu Zhang, and Zhendong Su
(ETH Zurich, Switzerland; National University of Singapore, Singapore)

Publisher's Version Published Artifact Info Artifacts Available Artifacts Functional

Semantic-Based Neural Network Repair
Richard Schumi and Jun Sun
(Singapore Management University, Singapore)

Publisher's Version

GDsmith: Detecting Bugs in Cypher Graph Database Engines
Ziyue Hua, Wei Lin, Luyao Ren, Zongyang Li, Lu Zhang, Wenpin Jiao, and Tao Xie
(Peking University, China)

Publisher's Version

Loop Invariant Inference through SMT Solving Enhanced Reinforcement Learning
Shiwen Yu, Ting Wang, and Ji Wang
(National University of Defense Technology, China)

Publisher's Version Published Artifact Info Artifacts Available

CODEP: Grammatical Seq2Seq Model for General-Purpose Code Generation
Yihong Dong, Ge Li, and Zhi Jin
(Peking University, China)

Publisher's Version

Concept-Based Automated Grading of CS-1 Programming Assignments
Zhiyu Fan, Shin Hwei Tan, and Abhik Roychoudhury
(National University of Singapore, Singapore; Concordia University, Canada)

Publisher's Version

Beware of the Unexpected: Bimodal Taint Analysis
Yiu Wai Chow, Max Schäfer, and Michael Pradel
(University of Stuttgart, Germany; GitHub, UK)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

DeUEDroid: Detecting Underground Economy Apps Based on UTG Similarity
Zhuo Chen, Jie Liu, Yubo Hu, Lei Wu, Yajin Zhou, Yiling He, Xianhao Liao, Ke Wang, Jinku Li, and Zhan Qin
(Zhejiang University, China; Ant Group, China; Xidian University, China)

Publisher's Version Published Artifact Archive submitted (850 kB) Artifacts Available

Dependency-Aware Metamorphic Testing of Datalog Engines
Muhammad Numair Mansur, Valentin Wüstholz, and Maria Christakis
(MPI-SWS, Germany; ConsenSys, Austria; TU Wien, Austria)

Publisher's Version Info

Fuzzing Deep Learning Compilers with HirGen
Haoyang Ma, Qingchao Shen, Yongqiang Tian, Junjie Chen, and Shing-Chi Cheung
(Hong Kong University of Science and Technology, China; Tianjin University, China; University of Waterloo, Canada)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

API2Vec: Learning Representations of API Sequences for Malware Detection
Lei Cui, Jiancong Cui, Yuede Ji, Zhiyu Hao, Lun Li, and Zhenquan Ding
(Zhongguancun Laboratory, China; University of Chinese Academy of Sciences, China; Institute of Information Engineering at Chinese Academy of Sciences, China; University of North Texas, USA)

Publisher's Version

June: A Type Testability Transformation for Improved ATG Performance
Dan Bruce, David Kelly, Hector Menendez, Earl T. Barr, and David Clark
(Microsoft, UK; University College London, UK; King’s College London, UK)

Publisher's Version

A Comprehensive Study on Quality Assurance Tools for Java
Han Liu, Sen Chen, Ruitao Feng, Chengwei Liu, Kaixuan Li, Zhengzi Xu, Liming Nie, Yang Liu, and Yixiang Chen
(East China Normal University, China; Tianjin University, China; UNSW, Australia; Nanyang Technological University, Singapore)

Publisher's Version

Detecting State Inconsistency Bugs in DApps via On-Chain Transaction Replay and Fuzzing
Mingxi Ye, Yuhong Nan, Zibin Zheng, Dongpeng Wu, and Huizhong Li
(Sun Yat-sen University, China; WeBank, China)

Publisher's Version Published Artifact Artifacts Available

FairRec: Fairness Testing for Deep Recommender Systems
Huizhong Guo, Jinfeng Li, Jingyi Wang, Xiangyu Liu, Dongxia Wang, Zehong Hu, Rong Zhang, and Hui Xue
(Zhejiang University, China; Alibaba Group, China)

Publisher's Version Archive submitted (71 kB)

ItyFuzz: Snapshot-Based Fuzzer for Smart Contract
Chaofan Shou, Shangyin Tan, and Koushik Sen
(University of California at Berkeley, USA)

Publisher's Version

Who Judges the Judge: An Empirical Study on Online Judge Tests
Kaibo Liu, Yudong Han, Jie M. Zhang, Zhenpeng Chen, Federica Sarro, Mark Harman, Gang Huang, and Yun Ma
(Peking University, China; King’s College London, UK; University College London, UK; National Key Laboratory of Data Space Technology and System, China)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

Precise and Efficient Patch Presence Test for Android Applications against Code Obfuscation
Zifan Xie, Ming Wen, Haoxiang Jia, Xiaochen Guo, Xiaotong Huang, Deqing Zou, and Hai Jin
(Huazhong University of Science and Technology, China)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

Detecting Vulnerabilities in Linux-Based Embedded Firmware with SSE-Based On-Demand Alias Analysis
Kai Cheng, Yaowen Zheng, Tao Liu, Le Guan, Peng Liu, Hong Li, Hongsong Zhu, Kejiang Ye, and Limin Sun
(Shenzhen Institute of Advanced Technology at Chinese Academy of Sciences, China; Sangfor Technologies, China; Nanyang Technological University, Singapore; Pennsylvania State University, USA; University of Georgia, USA; Institute of Information Engineering at Chinese Academy of Sciences, China; University of Chinese Academy of Sciences, China)

Publisher's Version Published Artifact Info Artifacts Available Artifacts Reusable

Definition and Detection of Defects in NFT Smart Contracts
Shuo Yang, Jiachi Chen, and Zibin Zheng
(Sun Yat-sen University, China)

Publisher's Version

Eunomia: Enabling User-Specified Fine-Grained Search in Symbolically Executing WebAssembly Binaries
Ningyu He, Zhehao Zhao, Jikai Wang, Yubin Hu, Shengjian Guo, Haoyu Wang, Guangtai Liang, Ding Li, Xiangqun Chen, and Yao Guo
(Peking University, China; Huazhong University of Science and Technology, China; Beijing University of Posts and Telecommunications, China; Baidu Security, USA; Huawei Cloud Computing Technologies, China)

Publisher's Version

Type Batched Program Reduction
Golnaz Gharachorlu and Nick Sumner
(Simon Fraser University, Canada)

Publisher's Version Published Artifact Artifacts Available

Automatically Reproducing Android Bug Reports using Natural Language Processing and Reinforcement Learning
Zhaoxu Zhang, Robert Winn, Yu Zhao, Tingting Yu, and William G.J. Halfond
(University of Southern California, USA; University of Central Missouri, USA; University of Cincinnati, USA)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

Large Language Models Are Zero-Shot Fuzzers: Fuzzing Deep-Learning Libraries via Large Language Models
Yinlin Deng, Chunqiu Steven Xia, Haoran Peng, Chenyuan Yang, and Lingming Zhang
(University of Illinois at Urbana-Champaign, USA; University of Science and Technology of China, China)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

Exploring Missed Optimizations in WebAssembly Optimizers
Zhibo Liu, Dongwei Xiao, Zongjie Li, Shuai Wang, and Wei Meng
(Hong Kong University of Science and Technology, China; Chinese University of Hong Kong, China)

Publisher's Version

PhysCov: Physical Test Coverage for Autonomous Vehicles
Carl Hildebrandt, Meriel von Stein, and Sebastian Elbaum
(University of Virginia, USA)

Publisher's Version Info

Building Critical Testing Scenarios for Autonomous Driving from Real Accidents
Xudong Zhang and Yan Cai
(Institute of Software at Chinese Academy of Sciences, China; University of Chinese Academy of Sciences, China)

Publisher's Version

CILIATE: Towards Fairer Class-Based Incremental Learning by Dataset and Training Refinement
Xuanqi Gao, Juan Zhai, Shiqing Ma, Chao Shen, Yufei Chen, and Shiwei Wang
(Xi’an Jiaotong University, China; University of Massachusetts, USA; City University of Hong Kong, China)

Publisher's Version

BehAVExplor: Behavior Diversity Guided Testing for Autonomous Driving Systems
Mingfei Cheng, Yuan Zhou, and Xiaofei Xie
(Singapore Management University, Singapore; Nanyang Technological University, Singapore)

Publisher's Version

In Defense of Simple Techniques for Neural Network Test Case Selection
Shenglin Bao, Chaofeng Sha, Bihuan Chen, Xin Peng, and Wenyun Zhao
(Fudan University, China)

Publisher's Version

ConfFix: Repairing Configuration Compatibility Issues in Android Apps
Huaxun Huang, Chi Xu, Ming Wen, Yepang Liu, and Shing-Chi Cheung
(Hong Kong University of Science and Technology, China; Southern University of Science and Technology, China; Huazhong University of Science and Technology, China)

Publisher's Version

Vectorizing Program Ingredients for Better JVM Testing
Tianchang Gao, Junjie Chen, Yingquan Zhao, Yuqun Zhang, and Lingming Zhang
(Tianjin University, China; Southern University of Science and Technology, China; University of Illinois at Urbana-Champaign, USA)

Publisher's Version

What You See Is What You Get? It Is Not the Case! Detecting Misleading Icons for Mobile Applications
Linlin Li, Ruifeng Wang, Xian Zhan, Ying Wang, Cuiyun Gao, Sinan Wang, and Yepang Liu
(Southern University of Science and Technology, China; Northeastern University, China; Harbin Institute of Technology, China)

Publisher's Version

Testing the Compiler for a New-Born Programming Language: An Industrial Case Study (Experience Paper)
Yingquan Zhao, Junjie Chen, Ruifeng Fu, Haojie Ye, and Zan Wang
(Tianjin University, China; Huawei, China)

Publisher's Version

Quantitative Policy Repair for Access Control on the Cloud
William Eiers, Ganesh Sankaran, and Tevfik Bultan
(University of California at Santa Barbara, USA)

Publisher's Version

Validating Multimedia Content Moderation Software via Semantic Fusion
Wenxuan Wang, Jingyuan Huang, Chang Chen, Jiazhen Gu, Jianping Zhang, Weibin Wu, Pinjia He, and Michael Lyu
(Chinese University of Hong Kong, China; Sun Yat-sen University, China)

Publisher's Version

Towards More Realistic Evaluation for Neural Test Oracle Generation
Zhongxin Liu, Kui Liu, Xin Xia, and Xiaohu Yang
(Zhejiang University, China; Huawei, China)

Publisher's Version

Back Deduction Based Testing for Word Sense Disambiguation Ability of Machine Translation Systems
Jun Wang, Yanhui Li, Xiang Huang, Lin Chen, Xiaofang Zhang, and Yuming Zhou
(Nanjing University, China; Soochow University, China)

Publisher's Version

DyCL: Dynamic Neural Network Compilation Via Program Rewriting and Graph Optimization
Simin Chen, Shiyi Wei, Cong Liu, and Wei Yang
(University of Texas at Dallas, USA; University of California at Riverside, USA)

Publisher's Version Published Artifact Info Artifacts Available Artifacts Functional

Systematically Producing Test Orders to Detect Order-Dependent Flaky Tests
Chengpeng Li, M. Mahdi Khosravi, Wing Lam, and August Shi
(University of Texas at Austin, USA; Middle East Technical University, Turkey; George Mason University, USA)

Publisher's Version

Security Checking of Trigger-Action-Programming Smart Home Integrations
Lei Bu, Qiuping Zhang, Suwan Li, Jinglin Dai, Guangdong Bai, Kai Chen, and Xuandong Li
(Nanjing University, China; University of Queensland, Australia; Institute of Information Engineering at Chinese Academy of Sciences, China)

Publisher's Version

LiResolver: License Incompatibility Resolution for Open Source Software
Sihan Xu, Ya Gao, Lingling Fan, Linyu Li, Xiangrui Cai, and Zheli Liu
(Nankai University, China)

Publisher's Version

More Precise Regression Test Selection via Reasoning about Semantics-Modifying Changes
Yu Liu, Jiyang Zhang, Pengyu Nie, Milos Gligoric, and Owolabi Legunsen
(University of Texas at Austin, USA; Cornell University, USA)

Publisher's Version

Silent Compiler Bug De-duplication via Three-Dimensional Analysis
Chen Yang, Junjie Chen, Xingyu Fan, Jiajun Jiang, and Jun Sun
(Tianjin University, China; Singapore Management University, Singapore)

Publisher's Version

ACETest: Automated Constraint Extraction for Testing Deep Learning Operators
Jingyi Shi, Yang Xiao, Yuekang Li, Yeting Li, Dongsong Yu, Chendong Yu, Hui Su, Yufeng Chen, and Wei Huo
(Institute of Information Engineering at Chinese Academy of Sciences, China; University of Chinese Academy of Sciences, China; UNSW, Australia; Zhongguancun Laboratory, China)

Publisher's Version

DDLDroid: Efficiently Detecting Data Loss Issues in Android Apps
Yuhao Zhou and Wei Song
(Nanjing University of Science and Technology, China)

Publisher's Version Published Artifact Artifacts Available

To Kill a Mutant: An Empirical Study of Mutation Testing Kills
Hang Du, Vijay Krishna Palepu, and James A. Jones
(University of California at Irvine, USA; Microsoft, USA)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

iSyn: Semi-automated Smart Contract Synthesis from Legal Financial Agreements
Pengcheng Fang, Zhenhua Zou, Xusheng Xiao, and Zhuotao Liu
(Case Western Reserve University, USA; Tsinghua University, China; Arizona State University, USA)

Publisher's Version Info

RefBERT: A Two-Stage Pre-trained Framework for Automatic Rename Refactoring
Hao Liu, Yanlin Wang, Zhao Wei, Yong Xu, Juhong Wang, Hui Li, and Rongrong Ji
(Xiamen University, China; Sun Yat-sen University, China; Tencent, China)

Publisher's Version

CoopHance: Cooperative Enhancement for Robustness of Deep Learning Systems
Quan Zhang, Yongqiang Tian, Yifeng Ding, Shanshan Li, Chengnian Sun, Yu Jiang, and Jiaguang Sun
(Tsinghua University, China; University of Waterloo, Canada; University of Illinois at Urbana-Champaign, USA; National University of Defense Technology, China)

Publisher's Version

ROME: Testing Image Captioning Systems via Recursive Object Melting
Boxi Yu, Zhiqing Zhong, Jiaqi Li, Yixing Yang, Shilin He, and Pinjia He
(Chinese University of Hong Kong, China; Microsoft Research, China)

Publisher's Version Published Artifact Artifacts Available

GPUHarbor: Testing GPU Memory Consistency at Large (Experience Paper)
Reese Levine, Mingun Cho, Devon McKee, Andrew Quinn, and Tyler Sorensen
(University of California at Santa Cruz, USA; University of California at Davis, USA)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

COME: Commit Message Generation with Modification Embedding
Yichen He, Liran Wang, Kaiyi Wang, Yupeng Zhang, Hang Zhang, and Zhoujun Li
(Beihang University, China)

Publisher's Version

OCFI: Make Function Entry Identification Hard Again
Chengbin Pang, Tiantai Zhang, Xuelan Xu, Linzhang Wang, and Bing Mao
(Nanjing University, China)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

Catamaran: Low-Overhead Memory Safety Enforcement via Parallel Acceleration
Yiyu Zhang, Tianyi Liu, Zewen Sun, Zhe Chen, Xuandong Li, and Zhiqiang Zuo
(Nanjing University, China; Nanjing University of Aeronautics and Astronautics, China)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

Latent Imitator: Generating Natural Individual Discriminatory Instances for Black-Box Fairness Testing
Yisong Xiao, Aishan Liu, Tianlin Li, and Xianglong Liu
(Beihang University, China; Institute of Dataspace, China; Nanyang Technological University, Singapore; Zhongguancun Laboratory, China)

Publisher's Version Info

Simulation-Based Validation for Autonomous Driving Systems
Changwen Li, Joseph Sifakis, Qiang Wang, Rongjie Yan, and Jian Zhang
(Institute of Software at Chinese Academy of Sciences, China; University of Chinese Academy of Sciences, China; University Grenoble Alpes, France; CNRS, France; Grenoble INP, France; VERIMAG, France; Academy of Military Sciences, China)

Publisher's Version Published Artifact Artifacts Available

Automated Program Repair from Fuzzing Perspective
YoungJae Kim, Seungheon Han, Askar Yeltayuly Khamit, and Jooyong Yi
(Ulsan National Institute of Science and Technology, South Korea)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

1dFuzz: Reproduce 1-Day Vulnerabilities with Directed Differential Fuzzing
Songtao Yang, Yubo He, Kaixiang Chen, Zheyu Ma, Xiapu Luo, Yong Xie, Jianjun Chen, and Chao Zhang
(Tsinghua University, China; Information Engineering University, China; Hong Kong Polytechnic University, China; Qinghai University, China)

Publisher's Version

A Bayesian Framework for Automated Debugging
Sungmin Kang, Wonkeun Choi, and Shin Yoo
(KAIST, South Korea)

Publisher's Version

That’s a Tough Call: Studying the Challenges of Call Graph Construction for WebAssembly
Daniel Lehmann, Michelle Thalakottur, Frank Tip, and Michael Pradel
(University of Stuttgart, Germany; Northeastern University, USA)

Publisher's Version Published Artifact Info Artifacts Available Artifacts Reusable

GenCoG: A DSL-Based Approach to Generating Computation Graphs for TVM Testing
Zihan Wang, Pengbo Nie, Xinyuan Miao, Yuting Chen, Chengcheng Wan, Lei Bu, and Jianjun Zhao
(Shanghai Jiao Tong University, China; East China Normal University, China; Nanjing University, China; Kyushu University, Japan)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

Alligator in Vest: A Practical Failure-Diagnosis Framework via Arm Hardware Features
Yiming Zhang, Yuxin Hu, Haonan Li, Wenxuan Shi, Zhenyu Ning, Xiapu Luo, and Fengwei Zhang
(Southern University of Science and Technology, China; Hong Kong Polytechnic University, China; Hunan University, China)

Publisher's Version

Guiding Greybox Fuzzing with Mutation Testing
Vasudev Vikram, Isabella Laybourn, Ao Li, Nicole Nair, Kelton OBrien, Rafaello Sanna, and Rohan Padhye
(Carnegie Mellon University, USA; Swarthmore College, USA; University of Minnesota, USA; University of Rochester, USA)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

Testing Automated Driving Systems by Breaking Many Laws Efficiently
Xiaodong Zhang, Wei Zhao, Yang Sun, Jun Sun, Yulong Shen, Xuewen Dong, and Zijiang Yang
(Xidian University, China; Singapore Management University, Singapore; GuardStrike, China)

Publisher's Version

DeepAtash: Focused Test Generation for Deep Learning Systems
Tahereh Zohdinasab, Vincenzo Riccio, and Paolo Tonella
(USI Lugano, Switzerland)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

SBDT: Search-Based Differential Testing of Certificate Parsers in SSL/TLS Implementations
Chu Chen, Pinghong Ren, Zhenhua Duan, Cong Tian, Xu Lu, and Bin Yu
(Qufu Normal University, China; Xidian University, China)

Publisher's Version

SmartState: Detecting State-Reverting Vulnerabilities in Smart Contracts via Fine-Grained State-Dependency Analysis
Zeqin Liao, Sicheng Hao, Yuhong Nan, and Zibin Zheng
(Sun Yat-sen University, China)

Publisher's Version

ωTest: WebView-Oriented Testing for Android Applications
Jiajun Hu, Lili Wei, Yepang Liu, and Shing-Chi Cheung
(Hong Kong University of Science and Technology, China; McGill University, Canada; Southern University of Science and Technology, China)

Publisher's Version Published Artifact Artifacts Available

ModelObfuscator: Obfuscating Model Information to Protect Deployed ML-Based Systems
Mingyi Zhou, Xiang Gao, Jing Wu, John Grundy, Xiao Chen, Chunyang Chen, and Li Li
(Monash University, Australia; Beihang University, China)

Publisher's Version Info

AGORA: Automated Generation of Test Oracles for REST APIs
Juan C. Alonso, Sergio Segura, and Antonio Ruiz-Cortés
(University of Seville, Spain)

Publisher's Version Published Artifact Info Artifacts Available Artifacts Reusable

Fuzzing Embedded Systems using Debug Interfaces
Max Eisele, Daniel Ebert, Christopher Huth, and Andreas Zeller
(Robert Bosch, Germany; Saarland University, Germany; CISPA Helmholtz Center for Information Security, Germany)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

Splendor: Static Detection of Stored XSS in Modern Web Applications
He Su, Feng Li, Lili Xu, Wenbo Hu, Yujie Sun, Qing Sun, Huina Chao, and Wei Huo
(Institute of Information Engineering at Chinese Academy of Sciences, China)

Publisher's Version Info

Applying and Extending the Delta Debugging Algorithm for Elevator Dispatching Algorithms (Experience Paper)
Pablo Valle, Aitor Arrieta, and Maite Arratibel
(Mondragon University, Spain; Orona, Spain)

Publisher's Version

Finding Short Slow Inputs Faster with Grammar-Based Search
Ziyad Alsaeed and Michal Young
(Qassim University, Saudi Arabia; University of Oregon, USA)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

Transforming Test Suites into Croissants
Yang Chen, Alperen Yildiz, Darko Marinov, and Reyhaneh Jabbarvand
(University of Illinois at Urbana-Champaign, USA; Sabanci University, Turkey)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

Tai-e: A Developer-Friendly Static Analysis Framework for Java by Harnessing the Good Designs of Classics
Tian Tan and Yue Li
(Nanjing University, China)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

Improving Binary Code Similarity Transformer Models by Semantics-Driven Instruction Deemphasis
Xiangzhe Xu, Shiwei Feng, Yapeng Ye, Guangyu Shen, Zian Su, Siyuan Cheng, Guanhong Tao, Qingkai Shi, Zhuo Zhang, and Xiangyu Zhang
(Purdue University, USA)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

Data Constraint Mining for Automatic Reconciliation Scripts Generation
Tianxiao Wang, Chen Zhi, Xiaoqun Zhou, Jinjie Wu, Jianwei Yin, and Shuiguang Deng
(Zhejiang University, China; Alibaba-Zhejiang University Joint Institute of Frontier Technologies, China; Alibaba Group, China)

Publisher's Version

Guided Retraining to Enhance the Detection of Difficult Android Malware
Nadia Daoudi, Kevin Allix, Tegawendé F. Bissyandé, and Jacques Klein
(University of Luxembourg, Luxembourg; CentraleSupélec, France)

Publisher's Version

DeFiTainter: Detecting Price Manipulation Vulnerabilities in DeFi Protocols
Queping Kong, Jiachi Chen, Yanlin Wang, Zigui Jiang, and Zibin Zheng
(Sun Yat-sen University, China)

Publisher's Version

Beyond “Protected” and “Private”: An Empirical Security Analysis of Custom Function Modifiers in Smart Contracts
Yuzhou Fang, Daoyuan Wu, Xiao Yi, Shuai Wang, Yufan Chen, Mengjie Chen, Yang Liu, and Lingxiao Jiang
(Hong Kong University of Science and Technology, China; Chinese University of Hong Kong, China; Xidian University, China; Mask Network, China; Nanyang Technological University, Singapore; Singapore Management University, Singapore)

Publisher's Version

Synthesizing Speech Test Cases with Text-to-Speech? An Empirical Study on the False Alarms in Automated Speech Recognition Testing
Julia Kaiwen Lau, Kelvin Kai Wen Kong, Julian Hao Yong, Per Hoong Tan, Zhou Yang, Zi Qian Yong, Joshua Chern Wey Low, Chun Yong Chong, Mei Kuan Lim, and David Lo
(Monash University Malaysia, Malaysia; Singapore Management University, Singapore)

Publisher's Version Info

A Tale of Two Approximations: Tightening Over-Approximation for DNN Robustness Verification via Under-Approximation
Zhiyi Xue, Si Liu, Zhaodi Zhang, Yiting Wu, and Min Zhang
(East China Normal University, China; ETH Zurich, Switzerland; Chengdu Education Research Institute, China)

Publisher's Version Published Artifact Info Artifacts Available Artifacts Functional

SlipCover: Near Zero-Overhead Code Coverage for Python
Juan Altmayer Pizzorno and Emery D. Berger
(University of Massachusetts Amherst, USA)

Publisher's Version Info

Systematic Testing of the Data-Poisoning Robustness of KNN
Yannan Li, Jingbo Wang, and Chao Wang
(University of Southern California, USA)

Publisher's Version

GrayC: Greybox Fuzzing of Compilers and Analysers for C
Karine Even-Mendoza, Arindam Sharma, Alastair F. Donaldson, and Cristian Cadar
(King’s College London, UK; Imperial College London, UK)

Publisher's Version Published Artifact Artifacts Available Artifacts Reusable

Enhancing REST API Testing with NLP Techniques
Myeongsoo Kim, Davide Corradini, Saurabh Sinha, Alessandro Orso, Michele Pasqua, Rachel Tzoref-Brill, and Mariano Ceccato
(Georgia Institute of Technology, USA; University of Verona, Italy; IBM Research, USA; IBM Research, Israel)

Publisher's Version Published Artifact Artifacts Available

Automated Generation of Security-Centric Descriptions for Smart Contract Bytecode
Yu Pan, Zhichao Xu, Levi Taiji Li, Yunhe Yang, and Mu Zhang
(University of Utah, USA)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

Toward Automated Detecting Unanticipated Price Feed in Smart Contract
Yifan Mo, Jiachi Chen, Yanlin Wang, and Zibin Zheng
(Sun Yat-sen University, China)

Publisher's Version

Virtual Reality (VR) Automated Testing in the Wild: A Case Study on Unity-Based VR Applications
Dhia Elhaq Rzig, Nafees Iqbal, Isabella Attisano, Xue Qin, and Foyzul Hassan
(University of Michigan at Dearborn, USA; Villanova University, USA)

Publisher's Version Published Artifact Artifacts Available

How Effective Are Neural Networks for Fixing Security Vulnerabilities
Yi Wu, Nan Jiang, Hung Viet Pham, Thibaud Lutellier, Jordan Davis, Lin Tan, Petr Babkin, and Sameena Shah
(Purdue University, USA; York University, Canada; University of Alberta, Canada; J.P. Morgan AI Research, USA)

Publisher's Version

Rare Path Guided Fuzzing
Seemanta Saha, Laboni Sarker, Md Shafiuzzaman, Chaofan Shou, Albert Li, Ganesh Sankaran, and Tevfik Bultan
(University of California at Santa Barbara, USA)

Publisher's Version

CGuard: Scalable and Precise Object Bounds Protection for C
Piyus Kedia, Rahul Purandare, Udit Agarwal, and Rishabh
(IIIT Delhi, India; University of Nebraska-Lincoln, USA; University of British Columbia, Canada; GGSIPU, India)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

An Empirical Study of Functional Bugs in Android Apps
Yiheng Xiong, Mengqian Xu, Ting Su, Jingling Sun, Jue Wang, He Wen, Geguang Pu, Jifeng He, and Zhendong Su
(East China Normal University, China; Nanjing University, China; ETH Zurich, Switzerland)

Publisher's Version

NodeRT: Detecting Races in Node.js Applications Practically
Jingyao Zhou, Lei Xu, Gongzheng Lu, Weifeng Zhang, and Xiangyu Zhang
(Nanjing University, China; Suzhou City University, China; Nanjing University of Posts and Telecommunications, China; Purdue University, USA)

Publisher's Version

An Empirical Study on Concurrency Bugs in Interrupt-Driven Embedded Software
Chao Li, Rui Chen, Boxiang Wang, Zhixuan Wang, Tingting Yu, Yunsong Jiang, Bin Gu, and Mengfei Yang
(Beijing Institute of Control Engineering, China; Beijing Sunwise Information Technology, China; Xidian University, China; China Academy of Space Technology, China)

Publisher's Version

CodeGrid: A Grid Representation of Code
Abdoul Kader Kaboré, Earl T. Barr, Jacques Klein, and Tegawendé F. Bissyandé
(University of Luxembourg, Luxembourg; University College London, UK; Google DeepMind, Canada)

Publisher's Version

Detecting Condition-Related Bugs with Control Flow Graph Neural Network
Jian Zhang, Xu Wang, Hongyu Zhang, Hailong Sun, Xudong Liu, Chunming Hu, and Yang Liu
(Beihang University, China; Chongqing University, China; Nanyang Technological University, Singapore)

Publisher's Version

Third-Party Library Dependency for Large-Scale SCA in the C/C++ Ecosystem: How Far Are We?
Ling Jiang, Hengchen Yuan, Qiyi Tang, Sen Nie, Shi Wu, and Yuqun Zhang
(Southern University of Science and Technology, China; Tencent Security Keen Lab, China)

Publisher's Version

Green Fuzzer Benchmarking
Jiradet Ounjai, Valentin Wüstholz, and Maria Christakis
(MPI-SWS, Germany; ConsenSys, Austria; TU Wien, Austria)

Publisher's Version Info

Interpreters for GNN-Based Vulnerability Detection: Are We There Yet?
Yutao Hu, Suyuan Wang, Wenke Li, Junru Peng, Yueming Wu, Deqing Zou, and Hai Jin
(Huazhong University of Science and Technology, China; Wuhan University, China; Nanyang Technological University, Singapore)

Publisher's Version

An Empirical Study on the Effects of Obfuscation on Static Machine Learning-Based Malicious JavaScript Detectors
Kunlun Ren, Weizhong Qiang, Yueming Wu, Yi Zhou, Deqing Zou, and Hai Jin
(Huazhong University of Science and Technology, China; Nanyang Technological University, Singapore)

Publisher's Version Published Artifact Artifacts Available

Understanding Breaking Changes in the Wild
Dhanushka Jayasuriya, Valerio Terragni, Jens Dietrich, Samuel Ou, and Kelly Blincoe
(University of Auckland, New Zealand; Victoria University of Wellington, New Zealand)

Publisher's Version Published Artifact Artifacts Available Artifacts Functional

Improving Spectrum-Based Localization of Multiple Faults by Iterative Test Suite Reduction
Dylan Callaghan and Bernd Fischer
(Stellenbosch University, South Africa)

Publisher's Version Published Artifact Info Artifacts Available Artifacts Reusable

Extracting Inline Tests from Unit Tests
Yu Liu, Pengyu Nie, Anna Guo, Milos Gligoric, and Owolabi Legunsen
(University of Texas at Austin, USA; Cornell University, USA)

Publisher's Version

Tool Demonstrations

DDLDroid: A Static Analyzer for Automatically Detecting Data Loss Issues in Android Applications
Yuhao Zhou and Wei Song
(Nanjing University of Science and Technology, China)

Publisher's Version

Behaviorally Typed State Machines in TypeScript for Heterogeneous Swarms
Roland Kuhn and Alan Darmasaputra
(Actyx, Germany)

Publisher's Version

ECSTATIC: Automatic Configuration-Aware Testing and Debugging of Static Analysis Tools
Austin Mordahl, Dakota Soles, Miao Miao, Zenong Zhang, and Shiyi Wei
(University of Texas at Dallas, USA)

Publisher's Version

RustSmith: Random Differential Compiler Testing for Rust
Mayank Sharma, Pingshi Yu, and Alastair F. Donaldson
(Imperial College London, UK)

Publisher's Version

KeenTune: Automated Tuning Tool for Cloud Application Performance Testing and Optimization
Qinglong Wang, Runzhe Wang, Yuxi Hu, Xiaohai Shi, Zheng Liu, Tao Ma, Houbing Song, and Heyuan Shi
(Alibaba Group, China; University of Maryland, Baltimore County, USA; Central South University, China)

Publisher's Version Video Info

KDAlloc: The KLEE Deterministic Allocator: Deterministic Memory Allocation during Symbolic Execution and Test Case Replay
Daniel Schemmel, Julian Büning, Frank Busse, Martin Nowack, and Cristian Cadar
(Imperial College London, UK; RWTH Aachen University, Germany)

Publisher's Version Info

EDHOC-Fuzzer: An EDHOC Protocol State Fuzzer
Konstantinos Sagonas and Thanasis Typaldos
(Uppsala University, Sweden; National Technical University of Athens, Greece)

Publisher's Version

MetaData262: Automatic Test Suite Selection for Partial JavaScript Implementations
Frederico Ramos, Diogo Costa Reis, Miguel Trigo, António Morgado, and José Fragoso Santos
(Instituto Superior Técnico, Portugal; University of Lleida, Spain; INESC-ID, Portugal)

Publisher's Version Published Artifact Artifacts Available

RobotBT: Behavior-Tree-Based Test-Case Specification for the Robot Framework
Sven Peldszus, Noubar Akopian, and Thorsten Berger
(Ruhr University Bochum, Germany; Chalmers, Sweden; University of Gothenburg, Sweden)

Publisher's Version Video

TreeLine and SlackLine: Grammar-Based Performance Fuzzing on Coffee Break
Ziyad Alsaeed and Michal Young
(Qassim University, Saudi Arabia; University of Oregon, USA)

Publisher's Version Video

Oven: Safe and Live Communication Protocols in Scala, using Synthetic Behavioural Type Analysis
Francisco Ferreira and Sung-Shik Jongmans
(Royal Holloway University of London, UK; Open University of the Netherlands, Netherlands; CWI, Netherlands)

Publisher's Version

SymRustC: A Hybrid Fuzzer for Rust
Frédéric Tuong, Mohammad Omidvar Tehrani, Marco Gaboardi, and Steven Y. Ko
(Simon Fraser University, Canada; Boston University, USA)

Publisher's Version

EvoSpex: A Search-Based Tool for Postcondition Inference
Facundo Molina, Pablo Ponzio, Nazareno Aguirre, and Marcelo F. Frias
(IMDEA Software Institute, Spain; University of Rio Cuarto, Argentina; CONICET, Argentina; University of Texas at El Paso, USA)

Publisher's Version Video Info

PExReport-Maven: Creating Pruned Executable Cross-Project Failure Reports in Maven Build System
Sunzhou Huang and Xiaoyin Wang
(University of Texas at San Antonio, USA)

Publisher's Version

Doctoral Symposium

Late PhD Students

Quantitative Robustness Analysis of Neural Networks
Mara Downing
(University of California at Santa Barbara, USA)

Publisher's Version

Automatic Testing and Benchmarking for Configurable Static Analysis Tools
Austin Mordahl
(University of Texas at Dallas, USA)

Publisher's Version

Type Automata
Ori Roth
(Technion, Israel)

Publisher's Version

Harnessing Large Language Models for Simulink Toolchain Testing and Developing Diverse Open-Source Corpora of Simulink Models for Metric and Evolution Analysis
Sohil Lal Shrestha
(University of Texas at Arlington, USA)

Publisher's Version

Early PhD Students

Fairness Testing for Recommender Systems
Huizhong Guo
(Zhejiang University, China)

Publisher's Version

Quantitative Symbolic Similarity Analysis
Laboni Sarker
(University of California at Santa Barbara, USA)

Publisher's Version

Reasoning about MLIR Semantics through Effects and Handlers
Pingshi Yu
(Imperial College London, UK)

Publisher's Version

proc time: 18.57