Search Results - General and reference Cross-computing tools and techniques Validation

Static detection of cross-site scripting vulnerabilities by Wassermann, G., Zhendong Su

“… Web applications have XSS vulnerabilities because the validation they perform on untrusted input does not suffice to prevent that input from invoking a browser's JavaScript interpreter…”
Get full text

Exploiting Input Sanitization for Regex Denial of Service by Barlas, Efe, Du, Xin, Davis, James C.

“…Web services use server-side input sanitization to guard against harmful input. Some web services publish their sanitization logic to make their client…”
Get full text

Formally Verified Cloud-Scale Authorization by Chakarov, Aleks, Geldenhuys, Jaco, Heck, Matthew, Hicks, Michael, Huang, Sam, Jaloyan, Georges-Axel, Joshi, Anjali, Leino, K. Rustan M., Mayer, Mikael, McLaughlin, Sean, Mritunjai, Akhilesh, Pit-Claudel, Clement, Porncharoenwase, Sorawee, Rabe, Florian, Rapoport, Marianna, Reger, Giles, Roux, Cody, Rungta, Neha, Salkeld, Robin, Schlaipfer, Matthias, Schoepe, Daniel, Schwartzentruber, Johanna, Tasiran, Serdar, Tomb, Aaron, Torlak, Emina, Tristan, Jean-Baptiste, Wagner, Lucas, Whalen, Michael W., Willems, Remy, Xiang, Tongtong, Byun, Tae Joon, Cohen, Joshua, Fang, Ruijie, Jang, Junyoung, Rath, Jakob, Syeda, Hira Taqdees, Wagner, Dominik, Yuan, Yongwei

“…All critical systems must evolve to meet the needs of a growing and diversifying user base. But supporting that evolution is challenging at increasing scale:…”
Get full text

An Empirical Study of Proxy Contracts at the Ethereum Ecosystem Scale by Zhang, Mengya, Shukla, Preksha, Zhang, Wuqi, Zhang, Zhuo, Agrawal, Pranav, Lin, Zhiqiang, Zhang, Xiangyu, Zhang, Xiaokuan

“…The proxy design pattern separates data and code in smart contracts into proxy and logic contracts. Data resides in proxy contracts, while code is sourced from…”
Get full text

Safety in Autonomous Driving: Can Tools Offer Guarantees? by Fremont, Daniel J., Sangiovanni-Vincentelli, Alberto L., Seshia, Sanjit A.

“… We believe that formal methods will play an essential role in the enterprise of ensuring AV safety by providing tools for the modeling, verification, synthesis, and runtime assurance of AV systems…”
Get full text

Comparing design and code metrics for software quality prediction by Jiang, Yue, Cuki, Bojan, Menzies, Tim, Bartlow, Nick

“… One of the most important goals of such techniques is to accurately predict the modules where faults are likely to hide as early as possible in the development lifecycle…”
Get full text

Probing for Requirements Knowledge to Stimulate Architectural Thinking by Anish, Preethu Rose, Balasubramaniam, Balaji, Sainani, Abhishek, Cleland-Huang, Jane, Daneva, Maya, Wieringa, Roel J., Ghaisas, Smita

“…Software requirements specifications (SRSs) often lack the detail needed to make informed architectural decisions. Architects therefore either make…”
Get full text

SAT-Based Arithmetic Support for Alloy by Cornejo, Cesar

“…Formal specifications in Alloy are organized around user-defined data domains, associated with signatures, with almost no support for built-in datatypes. This…”
Get full text

Inferring better contracts by Wei, Yi, Furia, Carlo A., Kazmin, Nikolay, Meyer, Bertrand

“… We present new, completely automatic inference techniques and a supporting tool, which take advantage of the presence of simple programmer-written contracts in the code to infer sophisticated…”
Get full text

On gender, ethnicity, and culture in empirical software engineering research by Gren, Lucas

“…This note highlights the importance of investigating diversity aspects in combination in empirical research. It draws on the psychological discourse and…”
Get full text

Efficient hybrid typestate analysis by determining continuation-equivalent states by Bodden, Eric

“…Typestate analysis determines whether a program violates a set of finite-state properties. Because the typestate-analysis problem is statically undecidable,…”
Get full text

An effort and time based measure of usability by Tamir, Dan, Komogortsev, Oleg V, Mueller, Carl J

“…The hypothesis of this research is that usability relates to the physical effort that is required in order to use software in the accomplishment of interactive…”
Get full text

Using software engineering technology to improve the quality of medical processes by Clarke, Lori A, Avrunin, George A, Osterweil, Leon J

“…In this paper, we describe some of the key observations resulting from our work on using software engineering technologies to help detect errors in medical…”
Get full text

Model-based testing of automotive software: Some challenges and solutions by Petrenko, Alexandre, Timo, Omer Nguena, Ramesh, S.

“… Test generation is a computationally complex task, which requires efficient constraint solving techniques and some guidance from the test engineer when this task cannot be solved by a tool…”
Get full text

Continuous, Low Overhead, Run-Time Validation of Program Executions by Aktas, Erdem, Afram, Furat, Ghose, Kanad

“… supposed to do. Pre-execution validations of code integrity fail to detect run time compromises like code injection, return and jump-oriented programming, and illegal dynamic linking of program modules…”
Get full text

An investigation into coupling measures for C++ by Briand, Lionel, Devanbu, Prem, Melo, Walcelio

“…This paper proposes a comprehensive suite of measures to quantify the level of class coupling during the design of object-oriented systems. This suite takes…”
Get full text

ML-On-Rails: Safeguarding Machine Learning Models in Software Systems - A Case Study by Abdelkader, Hala, Abdelrazek, Mohamed, Barnett, Scott, Schneider, Jean-Guy, Rani, Priya, Vasa, Rajesh

“…Machine learning (ML), especially with the emergence of large language models (LLMs), has significantly transformed various industries. However, the transition…”
Get full text

Towards a methodology for lifelong validation of service compositions by Bianculli, Domenico, Ghezzi, Carlo

“… In particular, the traditional boundary between design time and run time is blurring. Validation, which traditionally pertains to design time, must now extend to run time…”
Get full text

Towards quantitative software reliability assessment in incremental development processes by Fujii, Toshiya, Dohi, Tadashi, Fujiwara, Takaji

“…The iterative and incremental development is becoming a major development process model in industry, and allows us for a good deal of parallelism between…”
Get full text

SciTrust: Evaluating the Trustworthiness of Large Language Models for Science by Herron, Emily, Yin, Junqi, Wang, Feiyi

“… SciTrust was applied to five LLMs, including one general-purpose and four scientific models, revealing nuanced strengths and weaknesses across different models and benchmark…”
Get full text