Andreas Zeller is visiting University of Sydney, and would be giving us a Basser Seminar on “Semantic Fuzzing: Massive Testing for Complex Input Formats“
Abstract
Automatic Test Generation (Fuzzing) has always suffered from two significant problems: First, the input generation problem – generating valid inputs that cover program functionality. Second, the oracle problem – that is, checking the outputs of the program under test to assess their correctness. In this talk, I present ISLa – a novel input specification language that combines grammars with constraints to produce correct and meaningful inputs as well as check given outputs for their correctness. ISLa constraints can be learned from inputs and outputs, reducing the specification load. ISLa comes as a command-line tool and a Python library for easy integration; it is available as open source at https://rindphi.github.io/isla/.
BIO:
Andreas Zeller is faculty at the CISPA Helmholtz Center for Information Security and professor for Software Engineering at Saarland University, both in Saarbrücken, Germany. His research on automated debugging, mining software archives, specification mining, and security testing has won several awards for its impact in academia and industry. Zeller is an ACM Fellow, an IFIP Fellow, an ERC Advanced Grant Awardee, and holds an ACM SIGSOFT Outstanding Research Award.
The presentation is here