With the rise of software complexity, software-related accidents represent a significant threat
for computer-based systems. Software Fault Injection is a method to anticipate worst-case …

The open source software community has published a substantial body of research on OSS
quality. Focusing on this peer-reviewed body of work lets us draw conclusions from …

As one of the most popular software testing techniques, fuzzing can find a variety of
weaknesses in a program, such as software bugs and vulnerabilities, by generating …

We present a new symbolic execution tool, KLEE, capable of automatically generating tests
that achieve high coverage on a diverse set of complex and environmentally-intensive …

This paper presents a systematic solution to the persistent problem of buffer overflow
attacks. Buffer overflow attacks gained notoriety in 1988 as part of the Morris Worm incident …

Given some test case, a program fails. Which circumstances of the test case are responsible
for the particular failure? The delta debugging algorithm generalizes and simplifies the …

The Internet of Things is the evolutionary step of the Internet that creates a worldwide
infrastructure interconnecting machines and humans. As the Internet became public in the …

We present a study of operating system errors found by automatic, static, compiler analysis
applied to the Linux and OpenBSD kernels. Our approach differs from previous studies that …

This paper describes a personalized k-anonymity model for protecting location privacy
against various privacy threats through location information sharing. Our model has two …

We describe a new technique for finding potential buffer overrun vulnerabilities in security-
critical C code. The key to success is to use static analysis: we formulate detection of buffer …