Reverse debugging is the ability of a debugger to stop after a failure in a program has been
observed and go back into the history of the execution to uncover the reason for the failure …

During the last 10 years, code inspection for standard programming errors has largely been
automated with static code analysis. During the next 10 years, we expect to see similar …

SAGE: whitebox fuzzing for security testing Page 1 40 coMMunicaTions of The acM | mArCh
2012 | vol. 55 | No. 3 practice MosT CoMMunICATIons reADers might think of “program …

Fuzz testing is an effective technique for finding security vulnerabilities in software.
Traditionally, fuzz testing tools apply random mutations to well-formed inputs of a program …

Data races are a particularly unpleasant kind of threading bugs. They are hard to find and
reproduce--you may not observe a bug during the entire testing cycle and will only see it in …

Currently multi-threaded C or C++ programs combine a single-threaded programming
language with a separate threads library. This is not entirely sound [7]. We describe an effort …

Bugs in multi-threaded programs often arise due to data races. Numerous static and
dynamic program analysis techniques have been proposed to detect data races. We …

Data races occur when multiple threads are about to access the same piece of memory, and
at least one of those accesses is a write. Such races can lead to hard-to-reproduce bugs that …

We report experiences with constraint-based whitebox fuzz testing in production across
hundreds of large Windows applications and over 500 machine years of computation from …

Debugging real systems is hard, requires deep knowledge of the code, and is time-
consuming. Bug reports rarely provide sufficient information, thus forcing developers to turn …