Ponencia SISTEDES

Fecha y lugar: Salón de actos. 17 de junio de 2024, 12:30h.

Ponente: Andreas Zeller, CISPA Helmholtz Center for Information Security

Título: Advances in Language-Based Testing

Resumen: Generating test inputs (Fuzzing) for software gets much easier if one knows the _input language_ of the software under test. In this talk, I present novel game-changing methods for (1) _inferring_ complex input languages statically via symbolic analysis, enabling fuzzers to cover the full input space with 100% precision and recall; (2) _specifying_ input languages, using novel combinations of grammars and constraints that cover syntax and semantics; (3) _applying_ these techniques on highly complex input domains such as XML, allowing to exhaustively test business systems; and (4) automatically _learning_ models from programs that fully replicate their input/output behavior, leveraging generated tests. Includes live demos!

Bio: Andreas Zeller is faculty at the CISPA Helmholtz Center for Information Security and professor for Software Engineering at Saarland University. His research on automated debugging, mining software archives, specification mining, and security testing has won several awards for its impact in academia and industry. Zeller is an ACM Fellow, holds an ACM SIGSOFT Outstanding Research Award, and has won two ERC Advanced Grants, Europe’s highest funding for individual researchers.