ASE 2026
Mon 12 - Fri 16 October 2026 Munich, Germany
VenueHoliday Inn Munich – City Center
Room nameForum 6
Capacity78
Room InformationNo extra information available
Program

You're viewing the program in a time zone which is different from your device's time zone change time zone

Mon 12 Oct

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

09:00 - 10:00
TRUST 1TRUST at Forum 6
Chair(s): Yutaro Kashiwa Nara Institute of Science and Technology, Fabio Palomba University of Salerno, Patrizio Pelliccione Gran Sasso Science Institute, L'Aquila, Italy, Gianmario Voria University of Salerno
09:00
10m
Day opening
TRUST 26 Opening
TRUST

09:10
12m
Talk
Software Project Management with LLM-Based Automation: Coordination, Validation, and Governance in Practice
TRUST
Ronnie de Souza Santos University of Calgary, Italo Santos University of Hawai‘i at Mānoa, Cleyton Magalhaes Universidade Federal Rural de Pernambuco
09:22
12m
Talk
RigorBench: Benchmarking Engineering Process Discipline in Autonomous AI Coding Agents
TRUST
Meher Bhaskar Madiraju Independent Researcher, Meher Sai Preetam Madiraju Georgia Institute of Technology
09:34
12m
Talk
Closed-World Trustworthy Copilots for Legal and Regulatory Text
TRUST
Monalisha Ojha University of Mannheim, Pragya Shrey Mishra Pillai College of Engineering
09:46
12m
Talk
From Regulation to Innovation: Mining High-Impact AI Patents Grounded in the EU AI Act and Korea's AI Basic Act
TRUST
Jimin Kim Software Policy & Research Institute(SPRi), Ho Jun Kang Software Policy & Research Institute(SPRi), Jaehyun Lee Software Policy & Research Institute(SPRi), Republic of Korea
10:30 - 12:30
TRUST 2TRUST at Forum 6
Chair(s): Yutaro Kashiwa Nara Institute of Science and Technology, Fabio Palomba University of Salerno, Patrizio Pelliccione Gran Sasso Science Institute, L'Aquila, Italy, Gianmario Voria University of Salerno
10:30
12m
Talk
AgentChaosBench: Benchmarking External Fault Detection and Localization in Agentic Systems
TRUST
Chenkai Zhang University of Toronto, Yiran Li University of Toronto, Yifang Tian University of Toronto, Michalis Bachras University of Toronto, Hans-Arno Jacobsen University of Toronto
Pre-print
10:42
12m
Talk
Can Open-Weight LLMs Predict Test Outcomes from Traces? A Cross-Subject Boundary Study on Tests4Py
TRUST
Giuliano Rasper Saarland University, Tural Mammadov CISPA Helmholtz Center for Information Security, Marius Smytzek CISPA Helmholtz Center for Information Security, Andreas Zeller CISPA Helmholtz Center for Information Security
10:54
12m
Talk
Dynamic Deception: When Pedestrians Team Up to Fool Autonomous Cars
TRUST
Masoud Jamshidiyan Tehrani Università della Svizzera italiana, Marco Gabriel Università della Svizzera italiana, Jinhan Kim Università della Svizzera italiana, Paolo Tonella USI Lugano
11:06
12m
Talk
Explaining LLM Adaptation Decisions in Self-Adaptive Systems via Faithful Input Attribution
TRUST
Balint Mate FZI Research Center for Information Technology, Vincenzo Scotti Karlsruhe Institute of Technology, Diego Perez-Palacin Linnaeus University, Raffaela Mirandola Karlsruhe Institute of Technology (KIT)
11:18
12m
Talk
Metamorphic Stress Testing of Vision-Language Components for Time-Critical Autonomous Systems
TRUST
Arman Chhetri Rochester Institute of Technology, Yinxi Liu Rochester Institute of Technology
11:30
12m
Talk
Automated Counterfactual Scenario Generation for Fairness Assessment of Large Language Models: the ScenGen Framework
TRUST
Alessandra Parziale Gran Sasso Science Institute, Antonio D'Auria University of Salerno, Daniele Pio Scaparra University of Salerno, Valeria Pontillo Gran Sasso Science Institute
11:42
12m
Talk
Leveraging Large Language Models for Automated Discriminatory Test Generation
TRUST
Sadia Afrin Mim George Mason University, Fatema Tuz Zohra George Mason University, Brittany Johnson George Mason University
11:54
8m
Talk
Fairness Guardrails for Autonomous Agents: A Trustworthiness-by-Design Vision from Social Cybersecurity
TRUST
Maria Teresa Baldassarre Department of Computer Science, University of Bari , Vita Santa Barletta University of Bari, Vito Bavaro University of Bari Aldo Moro, Ronnie de Souza Santos University of Calgary
12:02
8m
Talk
On Resilience in Multi-Agent Systems for Software Engineering
TRUST
Sandra Mitrovic IDSIA - USI, SUPSI, Cezar Sas IDSIA (USI-SUPSI), Matteo Salani IDSIA - USI, SUPSI
12:10
20m
Day closing
Open Discussion and Closing
TRUST

14:00 - 16:00
TRUSTTRUST at Forum 6
16:30 - 17:30
TRUSTTRUST at Forum 6

Tue 13 Oct

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

10:30 - 12:30
Human and Social Aspects: Program Comprehension and VisualizationResearch Papers / Journal First / Industry Showcase at Forum 6
Chair(s): Masud Rahman Dalhousie University
10:30
15m
Talk
Issue-Oriented Agent-Based Framework for Automated Review Comment Generation
Journal First
Shuochuan Li College of Intelligence and Computing, Tianjin University, Dong Wang Tianjin University, Patanamon Thongtanunam University of Melbourne, Zan Wang Tianjin University, Jiuqiao Yu University of California Berkeley, Junjie Chen Tianjin University
DOI
10:45
15m
Talk
ExplainBench: Evaluating Code Explanations from Agents
Research Papers
Zhiyuan Pan Zhejiang University, Sungmin Kang NUS, Imam Nur Bani Yusuf Singapore Management University, Singapore, Abhik Roychoudhury National University of Singapore
Pre-print
11:00
15m
Talk
Automating Low-Risk Code Review at Meta: RADAR, Risk Calibration, and Review Efficiency
Industry Showcase
Audris Mockus University of Tennessee, Peter C Rigby Meta / Concordia University, Nachiappan Nagappan Meta Platforms, Inc.
11:15
15m
Talk
RepoProbe: Benchmarking Architecture-Aware Repository Comprehension with Checklists
Research Papers
Yuexi Yang Zhejiang University, Alyssa Wu Tencent, Ji Luo Tencent, Richeng Xuan Tencent, Zhichao Hu Tencent, Yuhong Liu Tencent, Zhen Qin Zhejiang University
Pre-print
11:30
15m
Talk
“We Must Have Missed This Comment”: Detecting and Repairing Stale Function References in Linux Kernel Comments
Research Papers
Kexin Sun Nanjing University, Yunbo Lyu Singapore Management University, Xutong Ma Inria Paris, Hongyu Kuang Nanjing University, Ratnadira Widyasari Singapore Management University, Singapore, He Zhang Nanjing University, Xiaoxing Ma Nanjing University, Julia Lawall Inria, David Lo Singapore Management University
Pre-print
11:45
15m
Talk
How Developer Coreness Influences the Patch-Review Process: A Mixed-Method Study
Journal First
Christian Hechtl Saarland University, Thomas Bock Carnegie Mellon University, Ralf Ramsauer OTH Regensburg, Wolfgang Mauerer OTH Regensburg / Siemens AG, Sven Apel Saarland University
DOI Pre-print
12:00
15m
Talk
On the Reliability of Code Comprehension ProxiesACM SIGSOFT Distinguished Paper Award
Research Papers
Erfan Arvan New Jersey Institute of Technology, Nadeeshan De Silva William & Mary, Oscar Chaparro William & Mary, Martin Kellogg New Jersey Institute of Technology
Pre-print
12:15
15m
Talk
Same Scrutiny, More Time: Eye Tracking Insights into Reviewing LLM-Labelled CodeACM SIGSOFT Distinguished Paper Award
Research Papers
Ranim Khojah Chalmers University of Technology and University of Gothenburg, Francisco Gomes de Oliveira Neto Chalmers | University of Gothenburg, Mazen Mohamad Chalmers | RISE - Research Institutes of Sweden, Julian Frattini Chalmers | University of Gothenburg, Philipp Leitner Chalmers | University of Gothenburg
Pre-print
14:00 - 16:00
Security and Other Non-Functional Properties: Security and Privacy 2Journal First / Research Papers / Industry Showcase at Forum 6
Chair(s): Jiongchi Yu Nanyang Technological University
14:00
15m
Talk
Mind the Gap: Do Widely-Used SAST Tools Really Cover the Language-Specific Top CWEs?
Research Papers
zhilin li , Yiran Nie Hangzhou Institute for Advanced Study at University of Chinese Academy of Sciences, Xianglong Qi Beijing University of Technology, Jiwei Yan Institute of Software at Chinese Academy of Sciences, Jun Yan Institute of Software, Chinese Academy of Sciences
14:15
15m
Talk
Perception, Reasoning, and Action: A ReAct-Based Vulnerability Detection Framework with Repository-Level Reasoning
Research Papers
Xin-Cheng Wen Harbin Institute of Technology, Hanyue Luo Harbin Institute of Technology, Cuiyun Gao Harbin Institute of Technology, Shenzhen, Hao Zhu Peking University, Yang Xiao Institute of Information Engineering at Chinese Academy of Sciences; University of Chinese Academy of Sciences, Ge Li Peking University
14:30
15m
Talk
One Is Not Enough: The Untold Story of Multiple Security Patches for One Vulnerability
Research Papers
Fangyuan Zhang Nankai University, Lyuye Zhang Nankai University; Nanyang Technological University, Lingling Fan Nankai University, Chengwei Liu Nankai University, Yinan Li Nankai University, Liang Huang Qi An Xin Technology Group, Yang Liu Nanyang Technological University, Zheli Liu Nankai University, Sen Chen Nankai University
DOI
14:45
15m
Talk
Are Reasoning Traces Faithful in LLM-Based Code Vulnerability Detection?
Research Papers
Wang Jialai National University of Singapore, Juncheng Lu Southeast University, Songtao Yang Zhongguancun Laboratory, Bingyi He Huazhong University of Science and Technology, Zeyu Gao Tsinghua University, Chao Zhang Tsinghua University, Shuai Wang Hong Kong University of Science and Technology
15:00
15m
Talk
Harnessing Uncertainty in Code Language Models: Lessons from Vulnerability Detection
Research Papers
Haodong Li Huazhong University of Science and Technology, Xiao Cheng Macquarie University, Xudong Wang Zhongguancun Institute of Artificial Intelligence, Zhihao Guo UTS, Haoyu Wang Huazhong University of Science and Technology
15:15
15m
Talk
UntrustVul: Automated Untrustworthy Alert Identification in Vulnerability Detection Models
Journal First
Lam Nguyen Tung Monash University, Australia, Xiaoning Du Monash University, Neelofar Neelofar Royal Melbourne Institure of Techonlogy (RMIT), Aldeida Aleti Monash University
Link to publication DOI Pre-print
15:30
15m
Talk
No Isolated Evolution, No Blind Search: Memory-Guided Prompt Co-evolution for Industrial Multi-agent Vulnerability Detection
Industry Showcase
Jie Xu City University of Hong Kong, Zihan Wu City University of Hong Kong, Yun Peng Fudan University, Chun Yong Chong Monash University Malaysia, Linghan Meng Huawei, Kui Liu Huawei, Xiaohua Jia City University of Hong Kong
15:45
15m
Talk
AgenticSCR: An Autonomous Agentic Secure Code Review for Immature Vulnerabilities Detection
Industry Showcase
Wachiraphan (Ping) Charoenwet SonarSource, Kla Tantithamthavorn Monash University, Patanamon Thongtanunam University of Melbourne, Hong Yi Lin The University of Melbourne, Minwoo Jeong Atlassian, Ming Wu Atlassian
16:30 - 17:30
Software Analytics: Software MetricsIndustry Showcase / NIER / Research Papers / Journal First at Forum 6
Chair(s): Massimiliano Di Penta University of Sannio, Italy
16:30
15m
Talk
Less Noise, More Signal: the DRR Effect for Better Optimizations of a Range of SE Tasks
Journal First
Andre Lustosa North Carolina State University, Tim Menzies North Carolina State University
DOI Pre-print
16:45
15m
Talk
How Well Do LLMs Generate Taxonomies in the SE Domain? A Multi-perspective Evaluation Framework
Research Papers
Sota Nakashima Kyushu University, Yuta Ishimoto The University of Osaka, Masanari Kondo Kyushu University, Tao Xiao Kyushu University, Yasutaka Kamei Kyushu University
Pre-print
17:00
10m
Talk
The Ground Is Shifting: A Reflection on the Foundations of Software Measurement
NIER
Thomas Bock Carnegie Mellon University, Audris Mockus University of Tennessee, Bogdan Vasilescu Carnegie Mellon University
Pre-print
17:10
10m
Talk
ECLAIR: A Causally-Grounded AI Framework for Scientific Discovery in Empirical Software Engineering
NIER
Alejandro Velasco William & Mary, Daniel Rodriguez-Cardenas William & Mary, Dipin Khati William & Mary, David Nader Palacio Microsoft, Denys Poshyvanyk William & Mary
17:20
10m
Talk
When Elo Lies: Hidden Biases in Codeforces-Based Evaluation of Large Language Models in Practice
Industry Showcase
Shenyu Zheng Huawei Canada, Ximing Dong Huawei Canada, Xiaoshuang Liu Huawei, Chun Yong Chong Monash University Malaysia, Gustavo A. Oliva Huawei Canada and Queen's University, Dayi Lin Microsoft, Boyuan Chen Centre for Software Excellence, Huawei Canada, Shaowei Wang University of Manitoba, Ahmed E. Hassan Queen’s University

Wed 14 Oct

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

10:30 - 12:30
Security and Other Non-Functional Properties: Security and Privacy 4Journal First / Research Papers / Industry Showcase at Forum 6
Chair(s): Ruijie Meng CISPA Helmholtz Center for Information Security
10:30
15m
Talk
GraphQLer: Enhancing GraphQL Security with Context-Aware API Testing
Industry Showcase
Omar Tsai Simon Fraser University, Jianing Li Simon Fraser University, Tsz Tung Cheung Simon Fraser University, Lejing Huang Simon Fraser University, Hao Zhu Simon Fraser University, Jianrui Xiao Simon Fraser University, Iman Sharafaldin Forward Security, Mohammad A. Tayebi Simon Fraser University
Pre-print
10:45
15m
Talk
When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM AgentsACM SIGSOFT Distinguished Paper Award
Research Papers
Zesen Liu Hong Kong University of Science and Technology, Zhixiang Zhang Fudan University, Yuchong Xie Fudan University; Hong Kong University of Science and Technology, Dongdong She Hong Kong University of Science and Technology
11:00
15m
Talk
Self-Discovering Security Oracles: Meta-learning Vulnerability Detection Strategies through Adversarial Self-Play
Research Papers
Md Rashedul Hasan University of Nebraska-Lincoln, Hamid Bagheri University of Nebraska-Lincoln
DOI Media Attached File Attached
11:15
15m
Talk
To Think or Not to Think: Evaluating LLM Reasoning and Agents in Vulnerability Detection
Research Papers
Hua Beng Tan Singapore Management University, Ratnadira Widyasari Singapore Management University, Singapore, Merve Astekin SINTEF, Arda Goknil SINTEF Digital, Hasan Sozer Ozyegin University, Yan Naing Tun Singapore Management University, Erik Johannes Husom SINTEF Digital, Lwin Khin Shar Singapore Management University, Lingxiao Jiang Singapore Management University
11:30
15m
Talk
Decompiling the Web: Automated Semantic Recovery of Post-compilation Abstraction Leaks
Research Papers
Shriyans Sudhi Rochester Institute of Technology, Yinxi Liu Rochester Institute of Technology
11:45
15m
Talk
Context-Enhanced Vulnerability Detection Based on Large Language Models
Journal First
Yixin Yang , Bowen Xu Beihang University, Xiang Gao Beihang University, Hailong Sun Beihang University
DOI
12:00
15m
Talk
CLEAR: Causal Context-Based Agentic Reasoning for Vulnerability Detection
Research Papers
Sungju Yun Hanyang University, Sijune hwang Hanyang University, Yeonjoon Lee Hanyang University, Kyungtae Kang Hanyang University, Sungbin Park Hanyang University
Pre-print
12:15
15m
Talk
Learning to Triage Vulnerability Reports from Program Analysis: An Empirical Study in Node.js
Research Papers
Ronghao Ni Carnegie Mellon University, Aidan Z.H. Yang Amazon Web Services, Min-Chien Hsu Carnegie Mellon University, Nuno Sabino Carnegie Mellon University, Limin Jia Carnegie Mellon University, Ruben Martins Carnegie Mellon University, Darion Cassel Amazon Web Services, Kevin Cheang Amazon Web Services
Pre-print
14:00 - 16:00
Software Analytics: Mining Software Repositories 1Research Papers / Journal First at Forum 6
Chair(s): Maleknaz Nayebi York University
14:00
15m
Talk
Characterizing the Landscape of Open-Source Satellite Software
Research Papers
Jinfeng Wen Beijing University of Posts and Telecommunications, Qi Liang Beijing University of Posts and Telecommunications, Yuehan Sun Beijing University of Posts and Telecommunications, Federica Sarro University College London, Ao Zhou Beijing University of Posts and Telecommunications, Xuanzhe Liu Peking University, Shangguang Wang Beijing University of Posts and Telecommunications
14:15
15m
Talk
Recovering Revisions of Pull Requests with Altered History
Research Papers
Gengyi Sun University of Waterloo, Georges Aaron RANDRIANAINA University of Waterloo, Tao Xiao Kyushu University, Yasutaka Kamei Kyushu University, Shane McIntosh University of Waterloo
Pre-print
14:30
15m
Talk
An Exploratory Study on LLM-Generated Code and Comments in Code Repositories
Journal First
Yongyi Ji University of Leicester, Jiaji Wang University of Leicester, Yi Zhou University of Leicester, Fuxiang Chen University of Leicester, UK, Hongji Yang Leicester University, England
DOI
14:45
15m
Talk
RealAIGC: Towards More Realistic Evaluation of AI-Generated Code Detection in Real-World Code RepositoryACM SIGSOFT Distinguished Paper Award
Research Papers
Wentao Chen East China University of Science and Technology, Yufei Chen East China University of Science and Technology, Huiqun Yu East China University of Science and Technology; Shanghai Engineering Research Center of Smart Energy, Guisheng Fan East China University of Science and Technology, Kaiwen Zhi East China University of Science and Technology, Peite Guo East China University of Science and Technology, Jianyuan Yu East China University of Science and Technology
15:00
15m
Talk
Looks Good, but Does It Run? A Large-Scale Empirical Study of the Executability of Example Code in Model Cards
Research Papers
Simeng Yao National University of Defense Technology, Jialin Zhao National University of Defense Technology, Yang Zhang National University of Defense Technology, China, Tun Li National University of Defense Technology, Tao Wang National University of Defense Technology, Changrong Xie National University of Defense Technology, Zezhou Tang National University of Defense Technology, Yiwen Wu National University of Defense Technology
15:15
15m
Talk
Observing Fine-Grained Changes in Jupyter Notebooks During Development Time
Journal First
Sergey Titov JetBrains Research, Konstantin Grotov JetBrains Research, Constructor University, Cristina Sarasua Department of Informatics, University of Zurich, Zurich, Switzerland, Yaroslav Golubev JetBrains Research, Dhivyabharathi Ramasamy University of Zurich, Switzerland, Alberto Bacchelli IfI, University of Zurich, Abraham Bernstein Department of Informatics, University of Zurich, Zurich, Switzerland, Timofey Bryksin JetBrains Research
DOI
15:30
15m
Talk
ATLAS: Agentic Taxonomy of LArge-Scale Software Ecosystems
Research Papers
Junyi Lu Institute of Software, Chinese Academy of Sciences, University of Chinese Academy of Sciences, China, Mengyao Lyu Nanyang Technological University, Wu Jiahui Nanyang Technological University, Singapore, Lei Yu Institute of Software, Chinese Academy of Sciences, University of Chinese Academy of Sciences, China, Chengwei Liu Nankai University, Fengjun Zhang Institute of Software, Chinese Academy of Sciences, China, Li Yang Institute of Software, Chinese Academy of Sciences, Chun Zuo Sinosoft, Yang Liu Nanyang Technological University
15:45
15m
Talk
SustainSR: Interpretable OSS Sustainability Prediction via Symbolic Regression
Research Papers
Yang Deng Wuhan university, Mustafa Misir Duke Kunshan University, Jinfu Chen Wuhan University, Jifeng Xuan Wuhan University

Thu 15 Oct

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

10:30 - 12:30
Testing and Analysis: Regression and Model-Based Testing 5Tools and Datasets / Research Papers / Industry Showcase / NIER at Forum 6
Chair(s): Gregory Gay Chalmers University of Technology and University of Gothenburg
10:30
10m
Talk
FaultForge: A Business-Semantics-Driven Cross-Layer Fault Injection Framework for Microservice
NIER
Yongxin Yang Beijing University of Posts and Telecommunications, Yang Yang Beijing University of Chemical Technology, Anni Jiang Beijing University of Posts and Telecommunications, Mingyuan Yang Beijing University of Posts and Telecommunications, Peng Yu Beijing University of Posts and Telecommunications
10:40
10m
Talk
DT-Drive: A Tool for Deterministic Replay-Based Testing and Debugging of Autonomous Driving Systems
Tools and Datasets
Sanjeetha Pennada The University of Sheffield, Matthew Leach University of Sheffield, Olek Osikowicz University of Sheffield, UK, Donghwan Shin University of Sheffield
DOI
10:50
10m
Talk
Continuous On-Commit Certification Testing of Railway Control Software: An Experience Report
Industry Showcase
Jacopo Maltagliati University of Milano-Bicocca, Salvatore De Simone Rete Ferroviaria Italiana, Giovanni Denaro University of Milano - Bicocca
11:00
15m
Talk
Real-World Perturbation Testing of Autonomous Driving Systems
Research Papers
Stefano Carlo Lambertenghi Technische Universität München, fortiss GmbH, Matthias Weil TU Munich, Andrea Stocco Technical University of Munich, fortiss
Pre-print
11:15
15m
Talk
Property-Based Testing of Wafer Handling Robots via Model-Based Planning and Fuzzing
Research Papers
Ruiyang Xu East China Normal University, Jingjing Liang East China Normal University, Guoyue Zheng East China Normal University, Geguang Pu East China Normal University, China, Ting Su East China Normal University
11:30
15m
Talk
Test Suite Generation for Simulink Models: An Experience with Reactis
Industry Showcase
Andrea Bombarda University of Bergamo, Nunzio Marco Bisceglia Gran Sasso Science Institute (GSSI), Marco Saini University of Bergamo, Federico Formica McMaster University, Angelo Gargantini University of Bergamo, Claudio Menghi University of Bergamo; McMaster University
11:45
15m
Talk
Where Does Balance Break? Boundary Discovery for Game Balance Testing under a Finite Simulation Budget
Research Papers
Hiroki Mukai Ritsumeikan University, Yusaku Kato Ritsumeikan University, Norihiro Yoshida Ritsumeikan University, Erina Makihara Ritsumeikan University, Katsuro Inoue Ritsumeikan University
Pre-print
12:00
15m
Talk
QDoctor: Probe-Based Testing for Quantum Programs
Research Papers
Qichen Wang Kyushu University, Shangzhou Xia Kyushu University, Xiaoyu Guo Kyushu University, Jianjun Zhao Kyushu University
12:15
15m
Talk
Quantum Squeeziness: An Information Theoretical Metric for Quantum Software Testability
Research Papers
Avner Bensoussan King's College London, Hector Menendez King’s College London, Mohammad Reza Mousavi King's College London
14:00 - 16:00
Security and Other Non-Functional Properties: Security and Privacy 7Research Papers / Industry Showcase at Forum 6
Chair(s): Jihyeok Park Korea University
14:00
15m
Talk
S2CAgent: A Self-Learning Agent Knowledge Graph Framework for Software Supply Chain Analysis
Research Papers
Youfei Huang Nanjing University, Zhong Li Nanjing University, Minxue Pan Nanjing University, Xuandong Li Nanjing University
14:15
15m
Talk
Closing the Gap: Automated Discovery of Secure Dockerfile Reference Standards via Semantic Clustering in Enterprise Inner Source
Industry Showcase
Jessica Hösl TU Munich, Benedikt Hofmann Siemens AG, Patrick Stöckle Siemens AG
Pre-print
14:30
15m
Talk
How Effective Are NPM Malicious Package Detectors? A Large-Scale Empirical Study
Research Papers
Wenbo Guo Nanyang Technological University, Zhongwen Chen Sichuan University, Zhengzi Xu Imperial Global Singapore, Chengwei Liu Nankai University, Ming Kang Sichuan University, Shiwen Song Singapore Management University, CHENGYUE LIU Nanyang Technological University, Yijia Xu Sichuan University, Weisong Sun Nanyang Technological University, Yang Liu Nanyang Technological University
14:45
15m
Talk
Defensive Capability Analysis for JavaScript Libraries
Research Papers
Wenyuan Xu Aarhus University, Anders Møller Aarhus University
Pre-print
15:00
15m
Talk
When Dependencies Depend: A Large-Scale Study on Conditional Dependencies and Their Security Implications in C/C++
Research Papers
Yifeng Di Purdue University, Juewei Zhang Carnegie Mellon University, Tianyi Zhang Purdue University
15:15
15m
Talk
A Longitudinal Study of Android Apps Signing Key Protection
Research Papers
Mark Meng University College Dublin (UCD), Qing Zhang JD Group, Weirao Lu JD Group, Chunyang Chen TU Munich
15:30
15m
Paper
GANADI: Uncovering C/C++ OSS Reuse Genealogies via Pivotal Function-Based Clustering to Enhance Supply Chain Security
Research Papers
Dongyeon Kim Korea University, Seunghoon Woo Korea University, Heejo Lee Korea University
DOI Pre-print
16:30 - 17:30
Security and Other Non-Functional Properties: Security and Privacy 8Research Papers / Journal First / Industry Showcase at Forum 6
Chair(s): Seongmin Lee UCLA
16:30
15m
Talk
Evidence-Grounded Logic Vulnerability Detection for Smart Contracts via Runtime Context Reasoning
Research Papers
Guang Gong Tsinghua University; 360 Vulnerability Research Institute, Yucong Jiang 360 Vulnerability Research Institute, Rong Jian 360 Vulnerability Research Institute, Xiaotao Feng , Zhihan Wei 360 Vulnerability Research Institute, Qi Li Tsinghua University, Ke Xu Tsinghua University; Zhongguancun Laboratory
16:45
15m
Talk
Airdrop Scams in Practice: An Industry-Oriented Taxonomy, Benchmark, and Tool Audit
Industry Showcase
Ningyu He Hong Kong Polytechnic University, Xiaohui Hu Huazhong University of Science and Technology, Haoyu Wang Huazhong University of Science and Technology
17:00
15m
Talk
PoCo: Agentic Proof-of-Concept Exploit Generation for Smart Contracts
Journal First
Vivi Andersson KTH Royal Institute of Technology, Sofia Bobadilla KTH Royal Institute of Technology, Sweden, Harald Hobbelhagen KTH Royal Institute of Technology, Martin Monperrus KTH Royal Institute of Technology
DOI
17:15
15m
Talk
Demystifying Solana Bots: From GitHub Blueprints to On-Chain Fingerprints
Research Papers
Xiaoye Zheng Zhejiang University, Yujing Chen Zhejiang University, Minghao Wu Zhejiang University, David Lo Singapore Management University, Difan Xie Hangzhou High-Tech Zone (Binjiang) Institute of Blockchain and Data Security, Daoyuan Wu Lingnan University, Xiaohu Yang Zhejiang University, Zhiyuan Wan Zhejiang University

Mon 12 Oct

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

Room9:003010:003011:003012:003013:003014:003015:003016:003017:0030
Forum 6

Tue 13 Oct

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

Room10:0015304511:0015304512:0015304513:0015304514:0015304515:0015304516:0015304517:00153045
Forum 6

Wed 14 Oct

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

Room10:0015304511:0015304512:0015304513:0015304514:0015304515:00153045
Forum 6

Thu 15 Oct

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

Room10:0015304511:0015304512:0015304513:0015304514:0015304515:0015304516:0015304517:00153045
Forum 6