Fuzz testing (fuzzing) has witnessed its prosperity in detecting security flaws recently. It
generates a large number of test cases and monitors the executions for defects. Fuzzing has …

Fuzzing has proven to be a highly effective approach to uncover software bugs over the past
decade. After AFL popularized the groundbreaking concept of lightweight coverage …

While offering many advantages during software process, the practice of using multiple
programming languages in constructing one software system also introduces additional …

Database management systems (DBMSs) are critical components of modern data-intensive
applications. Developers have adopted many testing techniques to detect DBMS bugs such …

Despite the fact that most real-world software systems today are written in multiple
programming languages, existing program analysis based security techniques are still …

Autonomous driving has become real; semi-autonomous driving vehicles in an affordable
price range are already on the streets, and major automotive vendors are actively …

JavaScript has become an essential part of the Internet infrastructure, and today's interactive
web applications would be inconceivable without this programming language. On the …

NPM is the largest software ecosystem in the world, offering millions of free, reusable
packages. In recent years, various security threats to packages published on npm have …

In spite of their effectiveness in the context of vulnerability discovery, current state-of-the-art
binary program analysis approaches are limited by inherent trade-offs between accuracy …

Software vulnerabilities can pose severe harms to a computing system. They can lead to
system crash, privacy leakage, or even physical damage. Correctly identifying vulnerabilities …