Modern software systems often exhibit numerous configuration options to tailor them to user
requirements, including the system's performance behavior. Performance models derived …

Search-based software testing (SBST) has been shown to be an effective technique to
generate test cases automatically. Its effectiveness strongly depends on the guidance of the …

Due to the lack of established real-world benchmark suites for static taint analyses of
Android applications, evaluations of these analyses are often restricted and hard to …

In the last decade, a series of papers were published on using static analysis to detect
cryptographic API misuse. In each paper, apps are checked against a set of rules to see if …

One prominent tactic used to keep malicious behavior from being detected during dynamic
test campaigns is logic bombs, where malicious operations are triggered only when specific …

Static analysis is an important tool for detecting bugs in real-world software. The advent of
numerous analysis algorithms with their own tradeoffs has led to the proliferation of …

Apps on mobile phones manipulate all sorts of data, including sensitive data, leading to
privacy-related concerns. Recent regulations like the European GDPR provide rules for the …

The template-based approach to invariant generation is a parametric and relatively
complete methodology for inferring loop invariants. The relative completeness ensures the …

The most popular static taint analysis tools for Android allow users to change the underlying
analysis algorithms through configuration options. However, the large configuration spaces …

The IFDS algorithm can be both memory-and compute-intensive for large programs as it
needs to store a huge amount of path edges in memory and process them until a fixed point …