Program slicing is a technique to extract program parts with respect to some special
computation. Since Weiser first proposed the notion of slicing in 1979, hundreds of papers …

Fuzzing is a popular technique for finding software bugs. However, the performance of the
state-of-the-art fuzzers leaves a lot to be desired. Fuzzers based on symbolic execution …

Software fault localization, the act of identifying the locations of faults in a program, is widely
recognized to be one of the most tedious, time consuming, and expensive-yet equally critical …

Software change impact analysis (CIA) is a technique for identifying the effects of a change,
or estimating what needs to be modified to accomplish a change. Since the 1980s, there …

Typically debugging begins when during a program execution a point is reached at which
an obviously incorrect value is observed. A general and powerful approach to automated …

Program slicing systematically identifies parts of a program relevant to a seed statement.
Unfortunately, slices of modern programs often grow too large for human consumption. We …

This chapter describes traditional and intuitive fault localization techniques, including
program logging, assertions, breakpoints, and profiling. Many advanced fault localization …

We present grey-box concolic testing, a novel path-based test case generation method that
combines the best of both white-box and grey-box fuzzing. At a high level, our technique …

Software debugging is the process of locating and correcting faulty code. Prior techniques to
locate faulty code either use program analysis techniques such as backward dynamic …

Given an incorrect value produced during a failed program run (eg, a wrong output value or
a value that causes the program to crash), the backward dynamic slice of the value very …