The release of AFL marked an important milestone in the area of software security testing,
revitalizing fuzzing as a major research topic and spurring a large number of research …

Program vulnerabilities, even when detected and reported, are not fixed immediately. The
time lag between the reporting and fixing of a vulnerability causes open-source software …

The popularity of coverage-guided greybox fuzzers has led to a tsunami of security-critical
bugs that developers must prioritize and fix. Knowing the capabilities a bug exposes (eg …

Automated program repair is an emerging technology which consists of a suite of techniques
to automatically fix bugs or vulnerabilities in programs. In this paper, we present a …

The advances of deep learning (DL) have paved the way for automatic software vulnerability
repair approaches, which effectively learn the mapping from the vulnerable code to the fixed …

Context: Static Application Security Testing Tools (SASTTs) identify software vulnerabilities
to support the security and reliability of software applications. Interestingly, several studies …

Understanding the cause, consequences, and severity of a security bug are critical facets of
the overall bug triaging and remediation process. Unfortunately, diagnosing failures is often …

The paradigm shift of enabling extensive intercommunication between the Operational
Technology (OT) and Information Technology (IT) devices allows vulnerabilities typical to the …

A transpiler converts code from one programming language to another. Many practical uses
of transpilers require the user to be able to guide or customize the program produced from a …

Software vulnerabilities are a major cyber threat and it is important to detect them. One
important approach to detecting vulnerabilities is to use deep learning while treating a …