Write a Blog >>
ICSE 2022
Sun 8 - Fri 27 May 2022
Mon 9 May 2022 22:05 - 22:10 at ICSE room 4-even hours - Validation and Verification 3 Chair(s): Yu Feng
Tue 10 May 2022 05:10 - 05:15 at ICSE room 4-odd hours - Validation and Verification 1 Chair(s): Grischa Liebel
Wed 25 May 2022 11:00 - 11:05 at Ballroom A - Papers 5: Validation and Verification Chair(s): Shiva Nejati
Wed 25 May 2022 13:30 - 15:00 at Ballroom Gallery - Posters 1

Software model checking as well as runtime verification are verification techniques which are widely used for checking temporal properties of software systems. Even though they are property verification techniques, their common usage in practice is in “bug finding”, that is, finding violations of temporal properties. Motivated by this observation and leveraging the recent progress in fuzzing, we build a greybox fuzzing framework to find violations of Linear-time Temporal Logic (LTL) properties.

Our framework takes as input a sequential program written in C/C++, and an LTL property. It finds violations, or counterexample traces, of the LTL property in stateful software systems; however, it does not achieve verification. Our work substantially extends directed greybox fuzzing to witness arbitrarily complex event orderings. We note that existing directed greybox fuzzing approaches are limited to witnessing reaching a location or witnessing simple event orderings like use-after-free. At the same time, compared to model checkers, our approach finds the counterexamples faster, thereby finding more counterexamples within a given time budget.

Our LTL-Fuzzer tool, built on top of the AFL fuzzer, is shown to be effective in detecting bugs in well-known protocol implementations, such as OpenSSL and Telnet. We use LTL-Fuzzer to reproduce known vulnerabilities (CVEs), to find 15 zero-day bugs by checking properties extracted from RFCs (for which 12 CVEs have been assigned), and to find violations of both safety as well as liveness properties in real-world protocol implementations. Our work represents a practical advance over software model checkers — while simultaneously representing a conceptual advance over existing greybox fuzzers. Our work thus provides a starting point for understanding the unexplored synergies among software model checking, runtime verification and greybox fuzzing.

Mon 9 May

Displayed time zone: Eastern Time (US & Canada) change

22:00 - 23:00
Validation and Verification 3SEIP - Software Engineering in Practice / Technical Track at ICSE room 4-even hours
Chair(s): Yu Feng University of California at Santa Barbara
22:00
5m
Talk
Verifying Dynamic Trait Objects in Rust
SEIP - Software Engineering in Practice
Alexa VanHattum Cornell University, Daniel Schwartz-Narbonne Amazon, n.n., Nathan Chong Amazon, Adrian Sampson Cornell University
Pre-print Media Attached
22:05
5m
Talk
Linear-time Temporal Logic guided Greybox Fuzzing
Technical Track
Ruijie Meng National University of Singapore, Singapore, Zhen Dong Fudan University, China, Jialin Li National University of Singapore, Singapore, Ivan Beschastnikh University of British Columbia, Abhik Roychoudhury National University of Singapore
DOI Pre-print Media Attached
22:10
5m
Talk
Quantifying Permissiveness of Access Control Policies
Technical Track
William Eiers University of California at Santa Barbara, USA, Ganesh Sankaran University of California Santa Barbara, Albert Li University of California Santa Barbara, Emily O'Mahony University of California Santa Barbara, Benjamin Prince University of California Santa Barbara, Tevfik Bultan University of California, Santa Barbara
Pre-print Media Attached
22:15
5m
Talk
Analyzing User Perspectives on Mobile App Privacy at Scale
Technical Track
Preksha Nema Google Inc., Pauline Anthonysamy Google Inc., Nina Taft Google Inc., Sai Teja Peddinti Google Inc.
Pre-print Media Attached

Tue 10 May

Displayed time zone: Eastern Time (US & Canada) change

05:00 - 06:00
Validation and Verification 1SEIP - Software Engineering in Practice / Technical Track at ICSE room 4-odd hours
Chair(s): Grischa Liebel Reykjavik University
05:00
5m
Talk
Unreliable Test Infrastructures in Automotive Testing Setups
SEIP - Software Engineering in Practice
Claudius Jordan Technical University of Munich, Philipp Foth Technical University of Munich, Alexander Pretschner TU Munich, Matthias Fruth TraceTronic GmbH
Pre-print Media Attached
05:05
5m
Talk
How Does Code Reviewing Feedback Evolve? A Longitudinal Study at Dell EMC
SEIP - Software Engineering in Practice
Ruiyin Wen McGill University, Maxime Lamothe Polytechnique Montréal, Shane McIntosh University of Waterloo
Pre-print Media Attached
05:10
5m
Talk
Linear-time Temporal Logic guided Greybox Fuzzing
Technical Track
Ruijie Meng National University of Singapore, Singapore, Zhen Dong Fudan University, China, Jialin Li National University of Singapore, Singapore, Ivan Beschastnikh University of British Columbia, Abhik Roychoudhury National University of Singapore
DOI Pre-print Media Attached
05:15
5m
Talk
ExAIS: Executable AI Semantics
Technical Track
Richard Schumi Singapore Management University, Jun Sun Singapore Management University
Pre-print Media Attached
05:20
5m
Talk
Nalin: Learning from Runtime Behavior to Find Name-Value Inconsistencies
Technical Track
Jibesh Patra University of Stuttgart, Michael Pradel University of Stuttgart
Pre-print Media Attached
05:25
5m
Talk
Dynamic Update for Synthesized GR(1) Controllers
Technical Track
Gal Amram Tel Aviv University, Shahar Maoz Tel Aviv University, Israel, Itai Segall Nokia Bell-Labs, Matan Yossef Tel Aviv University
Pre-print Media Attached

Wed 25 May

Displayed time zone: Eastern Time (US & Canada) change

11:00 - 12:30
Papers 5: Validation and VerificationSEIP - Software Engineering in Practice / Technical Track / Journal-First Papers at Ballroom A
Chair(s): Shiva Nejati University of Ottawa
11:00
5m
Talk
Linear-time Temporal Logic guided Greybox Fuzzing
Technical Track
Ruijie Meng National University of Singapore, Singapore, Zhen Dong Fudan University, China, Jialin Li National University of Singapore, Singapore, Ivan Beschastnikh University of British Columbia, Abhik Roychoudhury National University of Singapore
DOI Pre-print Media Attached
11:05
5m
Talk
Verification of Consistency between Process Models, Object Life Cycles, and Context-dependent Semantic Specifications
Journal-First Papers
Ralph Hoch Institute of Computer Technology, TU Wien, Christoph Luckeneder Vienna University of Technology, Roman Popp TU Wien, Vienna, Austria, Hermann Kaindl Institute of Computer Technology, TU Wien
Link to publication DOI Pre-print Media Attached
11:10
5m
Talk
GraphFuzz: Library API Fuzzing with Lifetime-aware Dataflow Graphs
Technical Track
Harrison Green ForAllSecure, Thanassis Avgerinos ForAllSecure
DOI Pre-print Media Attached
11:15
5m
Talk
ExAIS: Executable AI Semantics
Technical Track
Richard Schumi Singapore Management University, Jun Sun Singapore Management University
Pre-print Media Attached
11:20
5m
Talk
Verifying Dynamic Trait Objects in Rust
SEIP - Software Engineering in Practice
Alexa VanHattum Cornell University, Daniel Schwartz-Narbonne Amazon, n.n., Nathan Chong Amazon, Adrian Sampson Cornell University
Pre-print Media Attached
11:25
5m
Talk
Quantifying Permissiveness of Access Control Policies
Technical Track
William Eiers University of California at Santa Barbara, USA, Ganesh Sankaran University of California Santa Barbara, Albert Li University of California Santa Barbara, Emily O'Mahony University of California Santa Barbara, Benjamin Prince University of California Santa Barbara, Tevfik Bultan University of California, Santa Barbara
Pre-print Media Attached
11:30
5m
Talk
Fuzzing Class Specifications
Technical Track
Facundo Molina University of Rio Cuarto and CONICET, Argentina, Marcelo d'Amorim Federal University of Pernambuco, Nazareno Aguirre University of Rio Cuarto and CONICET, Argentina
Pre-print Media Attached
13:30 - 15:00
13:30
90m
Talk
In-IDE Code Generation from Natural Language: Promise and Challenges
Journal-First Papers
Frank Xu Carnegie Mellon University, Bogdan Vasilescu Carnegie Mellon University, USA, Graham Neubig Carnegie Mellon University
13:30
90m
Talk
Strategies for Reuse and Sharing among Data Scientists in Software Teams
SEIP - Software Engineering in Practice
Will Epperson Carnegie Mellon University, April Wang University of Michigan, Robert DeLine Microsoft Research, Steven M. Drucker Microsoft Research
Pre-print Media Attached
13:30
90m
Talk
Debugging with Stack Overflow: Web Search Behavior in Novice and Expert Programmers
SEET - Software Engineering Education and Training
Annie Li University of Michigan, Madeline Endres University of Michigan, Westley Weimer University of Michigan
DOI Pre-print Media Attached
13:30
90m
Talk
Static Stack-Preserving Intra-Procedural Slicing of WebAssembly BinariesBest Artifact Award
Technical Track
Quentin Stiévenart Vrije Universiteit Brussel, David Binkley Loyola University Maryland, Coen De Roover Vrije Universiteit Brussel
DOI Pre-print Media Attached
13:30
90m
Talk
Linear-time Temporal Logic guided Greybox Fuzzing
Technical Track
Ruijie Meng National University of Singapore, Singapore, Zhen Dong Fudan University, China, Jialin Li National University of Singapore, Singapore, Ivan Beschastnikh University of British Columbia, Abhik Roychoudhury National University of Singapore
DOI Pre-print Media Attached
13:30
90m
Talk
Individual differences limit predicting well-being and productivity using software repositories: a longitudinal industrial study
Journal-First Papers
Miikka Kuutila University of Oulu, Mika Mäntylä University of Oulu, Maëlick Claes University of Oulu, Marko Elovainio University of Helsinki, Bram Adams Queen's University, Kingston, Ontario
Link to publication Media Attached
13:30
90m
Talk
The Agile Success Model: A Mixed-methods Study of a Large-scale Agile Transformation
Journal-First Papers
Daniel Russo Department of Computer Science, Aalborg University
Link to publication DOI Pre-print
13:30
90m
Talk
PReach: A Heuristic for Probabilistic Reachability to Identify Hard to Reach Statements
Technical Track
Seemanta Saha University of California Santa Barbara, Mara Downing University of California, Santa Barbara, Tegan Brennan , Tevfik Bultan University of California, Santa Barbara
Pre-print Media Attached
13:30
90m
Talk
Active Learning of Discriminative Subgraph Patterns for API Misuse Detection
Journal-First Papers
Hong Jin Kang Singapore Management University, David Lo Singapore Management University
Pre-print Media Attached File Attached
13:30
90m
Talk
Toward Among-Device AI from On-Device AI with Stream Pipelines
SEIP - Software Engineering in Practice
MyungJoo Ham Samsung Electronics, Sangjung Woo Samsung Electronics, Jaeyun Jung Samsung Electronics, Wook Song Samsung Electronics, Gichan Jang Samsung Electronics, Yongjoo Ahn Samsung Electronics, Hyoungjoo Ahn Samsung Electronics
Pre-print Media Attached
13:30
90m
Talk
Integrating Hackathons into an Online Cybersecurity Course
SEET - Software Engineering Education and Training
Abasi-amefon Obot Affia University of Tartu, Estonia, Alexander Nolte University of Tartu, Raimundas Matulevičius University of Tartu, Estonia
DOI Pre-print Media Attached
13:30
90m
Talk
Verifying Dynamic Trait Objects in Rust
SEIP - Software Engineering in Practice
Alexa VanHattum Cornell University, Daniel Schwartz-Narbonne Amazon, n.n., Nathan Chong Amazon, Adrian Sampson Cornell University
Pre-print Media Attached
13:30
90m
Talk
Automatically Identifying Shared Root Causes of Test Breakages in SAP HANA
SEIP - Software Engineering in Practice
Gabin An KAIST, Juyeon Yoon Korea Advanced Institute of Science and Technology, Jeongju Sohn University of Luxembourg, Jingun Hong SAP Labs, Dongwon Hwang SAP Labs, Shin Yoo KAIST
Pre-print Media Attached
13:30
90m
Talk
Guiding Peer-feedback in Learning Software Design using UML
SEET - Software Engineering Education and Training
Satrio Adi Rukmono Institut Teknologi Bandung, Michel Chaudron Eindhoven University of Technology, The Netherlands
Pre-print Media Attached
13:30
90m
Talk
Fairness-aware Configuration of Machine Learning Libraries
Technical Track
Saeid Tizpaz-Niari University of Texas at El Paso, Ashish Kumar , Gang Tan Pennsylvania State University, Ashutosh Trivedi University of Colorado Boulder
DOI Pre-print Media Attached
13:30
90m
Talk
Using Pre-Trained Models to Boost Code Review Automation
Technical Track
Rosalia Tufano Università della Svizzera Italiana, Simone Masiero Software Institute @ Università della Svizzera Italiana, Antonio Mastropaolo Università della Svizzera italiana, Luca Pascarella Università della Svizzera italiana (USI), Denys Poshyvanyk William and Mary, Gabriele Bavota Software Institute, USI Università della Svizzera italiana
Pre-print Media Attached
13:30
90m
Talk
Automatic Anti-Pattern Detection in Microservice Architectures based on Distributed Tracing
SEIP - Software Engineering in Practice
Tim Hubener ING Bank N.V., Yaping Luo ING; Eindhoven University of Technology, Pieter Vallen ING, Jonck van der Kogel ING Bank N.V., Tom Liefheid ING Bank N.V., Michel Chaudron Eindhoven University of Technology, The Netherlands
Media Attached
13:30
90m
Talk
Retrieving Data Constraint Implementations Using Fine-Grained Code Patterns
Technical Track
Juan Manuel Florez The University of Texas at Dallas, Jonathan Perry The University of Texas at Dallas, Shiyi Wei University of Texas at Dallas, Andrian Marcus University of Texas at Dallas
Pre-print Media Attached
13:30
90m
Talk
Verification of Consistency between Process Models, Object Life Cycles, and Context-dependent Semantic Specifications
Journal-First Papers
Ralph Hoch Institute of Computer Technology, TU Wien, Christoph Luckeneder Vienna University of Technology, Roman Popp TU Wien, Vienna, Austria, Hermann Kaindl Institute of Computer Technology, TU Wien
Link to publication DOI Pre-print Media Attached
13:30
90m
Talk
If a Human Can See It, So Should Your System: Reliability Requirements for Machine Vision Components
Technical Track
Boyue Caroline Hu University of Toronto, Lina Marsso University of Toronto, Krzysztof Czarnecki University of Waterloo, Canada, Rick Salay University of Toronto, Huakun Shen University of Toronto, Marsha Chechik University of Toronto
DOI Pre-print Media Attached
13:30
90m
Talk
Preparing Software Engineers to Develop Robot Systems
SEET - Software Engineering Education and Training
Carl Hildebrandt University of Virginia, Meriel von Stein University of Virginia, Trey Woodlief University of Virginia, Sebastian Elbaum University of Virginia
DOI Pre-print Media Attached
13:30
90m
Poster
EUGAIN. The European Network For Gender Balance in Informatics
Technical Track
Valentina Lenarduzzi University of Oulu, Barbora Buhnova Masaryk University, Letizia Jaccheri Norwegian University of Science and Technology
13:30
90m
Talk
Detecting False Alarms from Automatic Static Analysis Tools: How Far are We?Nominated for Distinguished Paper
Technical Track
Hong Jin Kang Singapore Management University, Khai Loong Aw Singapore Management University, David Lo Singapore Management University
DOI Pre-print Media Attached File Attached
13:30
90m
Talk
An Ensemble Approach for Annotating Source Code Identifiers with Part-of-speech Tags
Journal-First Papers
Christian D. Newman Rochester Institute of Technology, Michael J. Decker Bowling Green State University, Reem S. Alsuhaibani Kent State University, Anthony Peruma Rochester Institute of Technology, Mohamed Wiem Mkaouer Rochester Institute of Technology, Satyajit Mohapatra Rochester Institute of Technology, Tejal Vishnoi Rochester Institute of Technology, Marcos Zampieri Rochester Institute of Technology, Timothy Sheldon BNY Mellon, Emily Hill Drew University
Link to publication DOI Pre-print Media Attached
13:30
90m
Talk
Counterfactual Explanations for Models of Code
SEIP - Software Engineering in Practice
Jürgen Cito TU Wien and Meta, Isil Dillig University of Texas at Austin, Vijayaraghavan Murali Meta Platforms, Inc., Satish Chandra Facebook
Pre-print Media Attached
13:30
90m
Talk
Nalin: Learning from Runtime Behavior to Find Name-Value Inconsistencies
Technical Track
Jibesh Patra University of Stuttgart, Michael Pradel University of Stuttgart
Pre-print Media Attached
13:30
90m
Talk
Learning to Find Usages of Library Functions in Optimized Binaries
Journal-First Papers
Toufique Ahmed University of California at Davis, Prem Devanbu Department of Computer Science, University of California, Davis, Anand Ashok Sawant University of California, Davis
Link to publication DOI Pre-print Media Attached
13:30
90m
Talk
DeepStability: A Study of Unstable Numerical Methods and Their Solutions in Deep Learning
Technical Track
Eliska Kloberdanz Iowa State University, Kyle Kloberdanz Cape Privacy, Wei Le Iowa State University
Pre-print Media Attached
13:30
90m
Talk
Fuzzing Class Specifications
Technical Track
Facundo Molina University of Rio Cuarto and CONICET, Argentina, Marcelo d'Amorim Federal University of Pernambuco, Nazareno Aguirre University of Rio Cuarto and CONICET, Argentina
Pre-print Media Attached
13:30
90m
Talk
Journal First Submission of the Article: What do class comments tell us? An investigation of comment evolution and practices in Pharo Smalltalk
Journal-First Papers
Pooja Rani University of bern, Sebastiano Panichella Zurich University of Applied Sciences, Manuel Leuenberger Software Composition Group, University of Bern, Switzerland, Mohammad Ghafari School of Computer Science, University of Auckland, Oscar Nierstrasz University of Bern, Switzerland
Link to publication DOI Authorizer link Media Attached

Information for Participants
Mon 9 May 2022 22:00 - 23:00 at ICSE room 4-even hours - Validation and Verification 3 Chair(s): Yu Feng
Info for room ICSE room 4-even hours:

Click here to go to the room on Midspace

Tue 10 May 2022 05:00 - 06:00 at ICSE room 4-odd hours - Validation and Verification 1 Chair(s): Grischa Liebel
Info for room ICSE room 4-odd hours:

Click here to go to the room on Midspace