An important aspect of cyber attack forensics is to understand the provenance of suspicious
events, as it discloses the root cause and ramifications of cyber attacks. Traditionally, this is …

Software bugs are inevitable in software-defined networking control software, and
troubleshooting is a tedious, time-consuming task. In this paper we discuss how to improve …

When troubleshooting buggy executions of distributed systems, developers typically start by
manually separating out events that are responsible for triggering the bug (signal) from …

We present a collection of tools, DrDebug, that greatly advances the state-of-the-art of cyclic,
interactive debugging of multi-threaded programs based upon the record and replay …

When programs fail in the field, developers are often left with limited information to diagnose
the failure. Automated error reporting tools can assist in bug report generation but without …

Debugging concurrent programs is known to be difficult due to scheduling non-determinism.
The technique of multiprocessor deterministic replay substantially assists debugging by …

Deterministic replay tools help programmers debug concurrent programs. However, for long-
running programs, a replay tool may generate huge log of shared memory access …

Cybercrime scene reconstruction that aims to reconstruct a previous execution of the cyber
attack delivery process is an important capability for cyber forensics (eg, post mortem …

Many happened-before-based detectors for debugging multithreaded programs implement
vector clocks to incrementally track the casual relations among synchronization events …

Software systems often produce logs that capture information about their execution
behaviour. When an error occurs, the log file with the error is reported for subsequent …