Mining Programs

•

2 recomendaciones•605 vistas

CISPA Helmholtz Center for Information Security

A program fails. How can we locate the cause? We show automated debugging methods that isolate failure causes.

Empresariales Tecnología

Mining Programs
Andreas Zeller
Saarland University

How to Debug
(Sommerville 2004)

Locate error

Más contenido relacionado

Más de CISPA Helmholtz Center for Information Security

Language-Based Testing and Debugging Andreas Zeller, CISPA Helmholtz Center for Information Security Joint work with Dominic Steinhöfel and the CISPA team If one knows the input language of a software system, one can use it for generating test inputs or for determining input patterns that cause specific behavior. But how does one specify an input language such that all properties of inputs are covered? In this talk, I introduce the ISLa specification language, combining grammars and constraints over nonterminals to capture even the most complex input languages. ISLa serves as a fuzzer, allowing to test programs with a large variety of inputs systematically, but also as a parser, decomposing inputs and outputs into individual elements. This opens up new directions for debugging, determining the exact conditions under which a program fails: "The program fails if the <check-temperature-option> is given and <temperature> < 0 holds." Includes live demos! Andreas Zeller is faculty at the CISPA Helmholtz Center for Information Security and professor for Software Engineering at Saarland University. His research on automated debugging, mining software archives, specification mining, and security testing has proven highly influential. Zeller is one of the few researchers to have received two ERC Advanced Grants, most recently for his S3 project. Zeller is an ACM Fellow and holds an ACM SIGSOFT Outstanding Research Award.

Language-Based Testing and Debugging.pdf

CISPA Helmholtz Center for Information Security

Digital Networking and Community

CISPA Helmholtz Center for Information Security

Andreas Zeller's keynote at the 1st Intl Fuzzing workshop 2022 at NDSS: https://fuzzingworkshop.github.io/program.html Do you fuzz your own program, or do you fuzz someone else's program? The answer to this question has vast consequences on your view on fuzzing. Fuzzing someone else's program is the typical adverse "security tester" perspective, where you want your fuzzer to be as automatic and versatile as possible. Fuzzing your own code, however, is more like a traditional tester perspective, where you may assume some knowledge about the program and its context, but may also want to _exploit_ this knowledge - say, to direct the fuzzer to critical locations. In this talk, I detail these differences in perspectives and assumptions, and highlight their consequences for fuzzer design and research. I also highlight cultural differences in the research communities, and what happens if you submit a paper to the wrong community. I close with an outlook into our newest frameworks, set to reconcile these perspectives by giving users unprecedented control over fuzzing, yet staying fully automatic if need be. Bio: Andreas Zeller is faculty at the CISPA Helmholtz Center for Information Security and a professor for Software Engineering at Saarland University, both in Saarbrücken, Germany. His research on automated debugging, mining software archives, specification mining, and security testing has won several awards for its impact in academia and industry. Zeller is an ACM Fellow, an IFIP Fellow, an ERC Advanced Grant Awardee, and holds an ACM SIGSOFT Outstanding Research Award.

Fuzzing - A Tale of Two Cultures

CISPA Helmholtz Center for Information Security

Illustrated Code: Building Software in a Literate Way Andreas Zeller, CISPA Helmholtz Center for Information Security Notebooks – rich, interactive documents that join together code, documentation, and outputs – are all the rage with data scientists. But can they be used for actual software development? In this talk, I share experiences from authoring two interactive textbooks – fuzzingbook.org and debuggingbook.org – and show how notebooks not only serve for exploring and explaining code and data, but also how they can be used as software modules, integrating self-checking documentation, tests, and tutorials all in one place. The resulting software focuses on the essential, is well-documented, highly maintainable, easily extensible, and has a much higher shelf life than the "duct tape and wire” prototypes frequently found in research and beyond.

Illustrated Code (ASE 2021)

CISPA Helmholtz Center for Information Security

At my talk "On Impact in Software Engineering Research", I present a number of lessons from (and for!) high-impact research: * Work on a real problem * Assume as little as possible * Keep things simple * Have a sound model * Keep on learning * Keep on moving * Build prototypes Video at https://youtu.be/md4Fp3Pro0o Andreas Zeller is faculty at the CISPA Helmholtz Center for Information Security and professor for Software Engineering at Saarland University, both in Saarbrücken, Germany. His research on automated debugging, mining software archives, specification mining, and security testing has won several awards for its impact in academia and industry. Zeller is an ACM Fellow, an IFIP Fellow, an ERC Advanced Grant Awardee, and holds an ACM SIGSOFT Outstanding Research Award.

On Impact in Software Engineering Research (HU Berlin 2021)

CISPA Helmholtz Center for Information Security

On Impact in Software Engineering Research (Dagstuhl 2020)

CISPA Helmholtz Center for Information Security

Fast and Effective Fuzz Testing (Facebook TAV 2019)

CISPA Helmholtz Center for Information Security

Software-Tests automatisch erzeugen: Frische Ansätze für Forschung, Praxis und Lehre Andreas Zeller, CISPA Helmholtz-Zentrum für Informationssicherheit, Saarbrücken Automatisch erzeugte Softwaretests können mit wenig menschlichem Aufwand viele Fehler finden. In diesem Vortrag stelle ich aktuelle Techniken zur Testerzeugung vor, die für ein gegebenes Programm vollautomatisch dessen Eingabesprache ableiten und aus den so entstehenden Grammatiken große Mengen gültiger Testeingaben ableiten. Unser grammatikbasierter LangFuzz-Testgenerator hat so in den JavaScript-Interpretern von Firefox, Chrome und Edge tausende Fehler gefunden. Die Techniken sind in dem interaktiven Buch “Generating Software Tests” (www.fuzzingbook.org) zusammengefasst. In einer Mischung von Text und Programmcode können Leser im Browser direkt mit den Programmen experimentieren und ihren Code live ergänzen und erweitern. Andreas Zeller ist Forscher am CISPA Helmholtz-Zentrum für Informationssicherheit und Professor für Softwaretechnik an der Universität des Saarlandes, beide in Saarbrücken. Seine Forschung beschäftigt sich mit der Analyse großer Software-Systeme und ihre Entwicklungsgeschichte. In 2010 wurde Zeller zum Fellow der ACM ernannt für seine Beiträge zur automatischen Fehlersuche und der Analyse von Software-Archiven, für die er 2018 als erster Deutscher den Outstanding Research Award der ACM SIGSOFT erhielt. Seine aktuellen Projekte kombinieren Testerzeugung und Specification Mining, gefördert durch den Europäischen Forschungsrat (ERC).

Software-Tests automatisch erzeugen: Frische Ansätze für Forschung, Praxis un...

CISPA Helmholtz Center for Information Security

Andreas Zeller, On Impact in Software Engineering Research Abstract: After 25 years in research, I am happy to have had some impact in Software Engineering Research - some of it on purpose, some of it accidentally. In this talk, I summarize six important lessons I have learned: Work on a real problem, assume as little as possible, keep things simple, have a sound model, keep on learning, and keep on moving. Bio: Andreas Zeller is a full professor for Software Engineering at Saarland University in Saarbrücken, Germany, since 2001. His research concerns the analysis of large software systems and their development process. In 2010, Zeller was inducted as Fellow of the ACM for his contributions to automated debugging and mining software archives, for which he also was awarded 10-year impact awards from ACM SIGSOFT and ICSE. In 2011, he received an ERC Advanced Grant, Europe's highest and most prestigious individual research grant, for work on specification mining and test case generation. In 2013, Zeller co-founded Testfabrik AG, a start-up on automatic testing of Web applications, where he chairs the supervisory board. In 2018, he received the Outstanding Research Award from ACM SiGSOFT.

On impact in Software Engineering Research (ICSE 2018 New Faculty Symposium)

CISPA Helmholtz Center for Information Security

On Impact in Software Engineering Research

CISPA Helmholtz Center for Information Security

Twelve tips on how to prepare an ERC grant proposal

CISPA Helmholtz Center for Information Security

Getting your work funded

CISPA Helmholtz Center for Information Security

Models—abstract and simple descriptions of some artifact—are the backbone of all software engineering activities. While writing models is hard, existing code can serve as a source for abstract descriptions of how software behaves. To infer correct usage, code analysis needs usage examples, though; the more, the better. We have built a lightweight parser that efficiently extracts API usage models from source code—models that can then be used to detect anomalies. Applied on the 200 million lines of code of the Gentoo Linux distribution, we would extract more than 15 million API constraints. On the web site checkmycode.org, anyone can check his/her code against the “wisdom of Linux”.

Learning from 6,000 projects mining specifications in the large

CISPA Helmholtz Center for Information Security

Talk recording available! See http://www.st.cs.uni-saarland.de/zeller/Debugging-Debugging/ "Yesterday, my program worked. Today, it does not. Why?" This paper, originally published at ESEC/FSE 1999, introduced the concept of delta debugging, a simple, yet very effective method for automated debugging. In 2009, this paper received the ACM SIGSOFT impact award as the most influential software engineering publication of 1999. In his keynote at ESEC/FSE in Amsterdam on August 27, 2009, Andreas Zeller reviews the state of automated debugging in the past and the future. He shares stories about how delta debugging came to be, how it can be hard to be simple, what programmers really need, and what research should do (and should not do) to explore and cater to these needs. Talk recording available! See http://www.st.cs.uni-saarland.de/zeller/Debugging-Debugging/

Debugging Debugging

CISPA Helmholtz Center for Information Security

Más de CISPA Helmholtz Center for Information Security (14)

Language-Based Testing and Debugging.pdf

Digital Networking and Community

Fuzzing - A Tale of Two Cultures

Illustrated Code (ASE 2021)

On Impact in Software Engineering Research (HU Berlin 2021)

On Impact in Software Engineering Research (Dagstuhl 2020)

Fast and Effective Fuzz Testing (Facebook TAV 2019)

Software-Tests automatisch erzeugen: Frische Ansätze für Forschung, Praxis un...

On impact in Software Engineering Research (ICSE 2018 New Faculty Symposium)

On Impact in Software Engineering Research

Twelve tips on how to prepare an ERC grant proposal

Getting your work funded

Learning from 6,000 projects mining specifications in the large

Debugging Debugging

Último

Falcon Invoice Discounting Setup for Small Businesses

Falcon investment

How to Maintain Healthy Life style.pptx

rdishurana

Focused on Discovering High-grade, Quality Ounces. The initial resource estimate on the high-grade silver “Waterpump Creek” zone of our 100% owned carbonate replacement deposit (CRD) was published in February 2024. Our intact mineral system encompasses the past producing Illinois Creek gold-silver mine, the Waterpump Creek deposit, and the Honker gold prospect, which make up the CRD system in focus. 25 kilometers northeast of the Illinois Creek CRD are the Round Top copper and the TG North CRD prospects. All prospects were originally discovered by Anaconda Minerals Co. in the 1980's. Since 2010, WAM reassembled the Anaconda land package and has been actively exploring the district. WAM’s 100% owned claims cover 73,120 acres (114.25 square miles). WAM brings together a team of seasoned professionals. Our strategic approach is underpinned by innovative exploration techniques and a deep understanding of the geological intricacies of the region.

WAM Corporate Presentation May 2024_w.pdf

Western Alaska Minerals Corp.

Powers and Functions of CPCB - The Water Act 1974.pdf

linciy03

Building Moonshots In today's rapidly evolving world, many industries have experienced disruption or are on the cusp of one. While organisations often discuss the importance of innovation and disruption for growth, it's not uncommon to find ourselves defaulting to familiar patterns and maintaining the status quo. To thrive amidst this change, businesses of all sizes must adopt strategic foresight not as an option but as an essential strategy. Developing strategic foresight enables organizations to anticipate and proactively respond to future challenges, ensuring they remain adaptable and resilient in an ever-changing landscape. By moving beyond "business as usual" thinking and embracing innovative approaches, companies can position themselves for long-term success.

Innomantra Viewpoint - Building Moonshots : May-Jun 2024.pdf

Innomantra

Raising capital is a pivotal process for any startup. This document outlines the vital phases every entrepreneur must navigate to transform an idea into a flourishing business. This resource provides a clear, detailed map of the funding landscape, from early angel rounds to the final stages before an IPO. Key Highlights from the Document: 1) Pre-Seed and Seed Funding: These initial stages are crucial for getting your startup off the ground, focusing on proving your concept and building a minimum viable product (MVP). 2) Series A to C Funding: As startups progress, funding rounds grow larger and focus shifts from proving viability to scaling the business, enhancing market share, and possibly even preparing for global expansion. 3) Bridge and Mezzanine Financing: These less common but crucial stages provide the necessary capital to bridge gaps between major funding rounds or prepare for a public offering. 4) IPO: The ultimate goal for many startups, going public opens new avenues for capital and provides liquidity for early investors.

Stages of Startup Funding - An Explainer

Alejandro Cremades

Expert Cross-Border Financial Planning Advisors

cardinalpointwealth11

Copyright: What Creators and Users of Art Need to Know

Miriam Robeson

Ready to unlock the full potential of your LinkedIn profile? Join us for an immersive workshop where you'll gain invaluable insights and practical tips to optimize your profile, expand your network, and elevate your personal brand. Official event during Techweek NZ: May 23rd @ 6pm - 7:30pm St Peters Church Garden Room 211 Willis Street, Te Aro, Wellington New Zealand Google Meet Link: View details and RSVP https://calendar.app.google/h34Jub18s6Ri31NS7

LinkedIn Masterclass Techweek 2024 v4.1.pptx

Symbio Agency Ltd

HAL Financial Performance Analysis and Future Prospects

Rajesh Gupta

The "Future of Trade 2024: Snapshot" report by DMCC explores the transformative changes and emerging trends in the global trade landscape. As the fifth edition of DMCC's biennial flagship report, it highlights how shifting political and economic alliances, technological advancements, and sustainability initiatives are reshaping trade dynamics. Key themes include the rise of regionalization due to geopolitical tensions, the reconfiguration of supply chains, the integration of AI, and the drive towards carbon net-zero. The report underscores the significance of adapting to new realities, such as the "chip war" between the US and China, and the pivotal role of AI and sustainability in driving trade efficiency and creating new market demands. It also addresses the strategic implications for businesses and policymakers, emphasizing the need for agility and foresight. Furthermore, the report delves into the drivers of change, such as geopolitical events, technological innovations, and environmental shifts, which are set to influence trade policies and consumer behavior. It offers insights from global experts and roundtables, providing strategic advice for navigating the complexities of modern trade. Ultimately, the "Future of Trade 2024: Snapshot" serves as a comprehensive guide for understanding the evolving trade environment, equipping stakeholders with the knowledge to make informed decisions and capitalize on emerging opportunities in a rapidly changing world.

Future of Trade 2024 - Decoupled and Reconfigured - Snapshot Report

Dubai Multi Commodity Centre

Your Work Matters to God RestorationChurch.pptx

Os Hillman

Blinkit, formerly known as Grofers, is a prominent player in the online grocery delivery industry in India. Founded in December 2013 by Albinder Dhindsa and Saurabh Kumar, Blinkit rebranded in 2021 to better reflect its mission of delivering groceries at a lightning-fast pace. The company is headquartered in Gurugram and operates across several major cities in India. Business Model: Blinkit operates on a hyperlocal delivery model, leveraging a network of dark stores—dedicated distribution centers not open to the public—to ensure quick and efficient delivery of groceries and daily essentials. Customers can place orders through the Blinkit app, which offers a user-friendly interface and a wide selection of products ranging from fresh produce and dairy to household items and personal care products.

Blinkit: Revolutionizing the On-Demand Grocery Delivery Service.pptx

Saksham Gupta

1Q24_EN hyundai capital 1q performance

irhcs

Creative Ideas for Interactive Team Presentations

SlidesAI

How to refresh to be fit for the future world

Chris Skinner

Hyundai capital 2024 1q Earnings release

irhcs

Aptar Closures segment - Corporate Overview-India.pdf

prchbhandari

In an era where change is the only constant, the internal audit landscape continues to evolve at a rapid pace. As professionals committed to upholding the highest standards of ethics, governance, and risk management, it's crucial to stay abreast of these changes. This year marks a pivotal moment in this journey with the release of the 2024 Global Internal Audit Standards by The Institute of Internal Auditors (IIA). These newly updated standards are not just a set of guidelines; they are a beacon that guides internal auditors through the complexities of modern business environments. They reflect a deep understanding of the challenges and opportunities faced by auditors in a world that is increasingly digital, interconnected, and regulated. Stay tuned as I delve deeper into each aspect of these groundbreaking standards. In my upcoming posts, I will be dissecting, summarizing, and offering insights into how these standards can be effectively implemented in various audit scenarios. As we embark on this journey together, I invite you to engage, question, and discuss these standards. Let's explore how they can shape the future of internal auditing.

Global Internal Audit Standards 2024.pdf

Amer Morgan

Navigating the seed funding landscape can be complex and demanding. Thanks to insights from Steve Schlafman of RRE Ventures, their detailed presentation sheds light on this critical phase of startup development. Key Points from the Presentation: 1) Sources of Seed Capital: Explore diverse funding sources from venture capital to angel investors and learn how to leverage them effectively. 2) Preparing for the Pitch: Understanding what investors look for in a seed stage startup is crucial— from traction and product to team dynamics. 3) The Pitch Itself: Learn how to create FOMO (Fear of Missing Out) among investors and how to convey your startup's value compellingly. 4) Post-Pitch Strategy: Discover what steps to take after your pitch to maintain momentum and secure funding.

Raising Seed Capital by Steve Schlafman at RRE Ventures

Alejandro Cremades

Mining Programs

1. Mining Programs Andreas Zeller Saarland University

9. Mining

10. The First Bug (September 9, 1947)

11. How to Debug (Sommerville 2004)

12. How to Debug (Sommerville 2004) Locate error

Mining Programs

Recomendados

Recomendados

Más contenido relacionado

Más de CISPA Helmholtz Center for Information Security

Más de CISPA Helmholtz Center for Information Security (14)

Último

Último (20)

Mining Programs