Developers often run tests to check that their latest changes to a code repository did not
break any previously working functionality. Ideally, any new test failures would indicate …

Grey-box fuzz testing has revealed thousands of vulnerabilities in real-world software owing
to its lightweight instrumentation, fast coverage feedback, and dynamic adjusting strategies …

We introduce the Clockwork Finance Framework (CFF), a general purpose, formal
verification framework for mechanized reasoning about the economic security properties of …

To improve software reliability, many rule-based techniques have been proposed to infer
programming rules and detect violations of these rules as bugs. These rule-based …

While privacy laws and regulations require apps and services to disclose the purposes of
their data collection to the users (ie, why do they collect my data?), the data usage in an …

Concurrency bugs are hard to find, reproduce, and debug. They often escape rigorous in-
house testing, but result in large-scale outages in production. Existing concurrency-bug …

Concurrency bugs are extremely difficult to detect. Recently, several dynamic techniques
achieve sound analysis. M2 is even complete for two threads. It is designed to decide …

Data races in multi-threaded parallel applications are notoriously damaging while extremely
difficult to detect. Many tools have been developed to help programmers find data races …

Software-Defined Networking (SDN) has significantly enriched network functionalities by
decoupling programmable network controllers from the network hardware. Because SDN …

We present maximal causality reduction (MCR), a new technique for stateless model
checking. MCR systematically explores the state-space of concurrent programs with a …