ASE 2024
266 papers
- 1+1>2: Integrating Deep Code Behaviors with Metadata Features for Malicious PyPI Package Detection
- A Comprehensive Study of Privacy Leakage Vulnerability in Android App Logs
- A Conceptual Framework for Quality Assurance of LLM-based Socio-critical Systems
- A Data-driven Approach for Mining Software Features based on Similar App Descriptions and User Reviews Analysis
- A Formal Treatment of Performance Bugs
- A Generalized Approach for Solving Web Form Constraints
- A High-level Architecture of an Automated Context-aware Ethics-based Negotiation Approach
- A Joint Learning Model with Variational Interaction for Multilingual Program Translation
- A Longitudinal Analysis Of Replicas in the Wild Wild Android
- A Pair Programming Framework for Code Generation via Multi-Plan Exploration and Feedback-Driven Refinement
- A Pixel-Level Explainable Approach of Convolutional Neural Networks and Its Application
- A Position-Aware Approach to Decomposing God Classes
- A Systematic Evaluation of Large Code Models in API Suggestion: When, Which, and How
- A vision on a methodology for the application of an Intrusion Detection System for satellites
- AACEGEN: Attention Guided Adversarial Code Example Generation for Deep Code Models
- AI-driven Java Performance Testing: Balancing Result Quality with Testing Time
- ART: A Unified Unsupervised Framework for Incident Management in Microservice Systems
- ARUS: A Tool for Automatically Removing Unnecessary Stubbings from Test Suites
- AVIATE: Exploiting Translation Variants of Artifacts to Improve IR-based Traceability Recovery in Bilingual Software Projects
- AXA: Cross-Language Analysis through Integration of Single-Language Analyses
- AdvSCanner: Generating Adversarial Smart Contracts to Exploit Reentrancy Vulnerabilities Using LLM and Static Analysis
- AgoneTest: Automated creation and assessment of Unit tests leveraging Large Language Models
- An Empirical Study on Learning-based Techniques for Explicit and Implicit Commit Messages Generation
- An Empirical Study to Evaluate AIGC Detectors on Code Content
- An Explainable Automated Model for Measuring Software Engineer Contribution
- Android Malware Family Labeling: Perspectives from the Industry
- Ansible Lightspeed: A Code Generation Service for IT Automation
- Applying Fuzz Driver Generation to Native C/C++ Libraries of OEM Android Framework: Obstacles and Solutions
- Approximation-guided Fairness Testing through Discriminatory Space Analysis
- Assessing Open Source Software Survivability using Kaplan-Meier Survival Function and Polynomial Regression
- Assessing the feasibility of Micro frontend architecture in native mobile app development
- Attacks and Defenses for Large Language Models on Coding Tasks
- Attribution-guided Adversarial Code Prompt Generation for Code Completion Models
- AutoDW: Automatic Data Wrangling Leveraging Large Language Models
- Automated Repair of Multi-fault Programs: Obstacles, Approaches, and Prospects
- Automated Validation of COBOL to Java Transformation
- Automatically Deriving Developers' Technical Expertise from the GitHub Social Network
- B4: Towards Optimal Assessment of Plausible Code Solutions with Plausible Tests
- Balancing the Quality and Cost of Updating Dependencies
- BenchCloud: A Platform for Scalable Performance Benchmarking
- Beyond Manual Modeling: Automating GUI Model Generation Using Design Documents
- Blackbox Observability of Features and Feature Interactions
- Bridging Gaps in LLM Code Translation: Reducing Errors with Call Graphs and Bridged Debuggers
- Bridging the Gap between Real-world and Synthetic Images for Testing Autonomous Driving Systems
- Build Issue Resolution from the Perspective of Non-Contributors
- COBRA: Interaction-Aware Bytecode-Level Vulnerability Detector for Smart Contracts
- Can Code Metrics Enhance Documentation Generation for Computational Notebooks?
- Can Cooperative Multi-Agent Reinforcement Learning Boost Automatic Web Testing? An Exploratory Study
- Can Large Language Models Comprehend Code Stylometry?
- Challenges & Opportunities in Automating DBMS: A Qualitative Study
- ChatBR: Automated assessment and improvement of bug report quality using ChatGPT
- Cloud Resource Protection via Automated Security Property Reasoning
- CoDefeater: Using LLMs To Find Defeaters in Assurance Cases
- CoVeriTeam GUI: A No-Code Approach to Cooperative Software Verification
- Coding-PTMs: How to Find Optimal Code Pre-trained Models for Code Embedding in Vulnerability Detection?
- Combining Coverage and Expert Features with Semantic Representation for Coincidental Correctness Detection
- CompAi: A Tool for GDPR Completeness Checking of Privacy Policies using Artificial Intelligence
- Compiler Bug Isolation via Enhanced Test Program Mutation
- ComplexCodeEval: A Benchmark for Evaluating Large Code Models on More Complex Code
- Compositional Security Analysis of Dynamic Component-based Systems
- Constraint-Based Test Oracles for Program Analyzers
- Constructing Surrogate Models in Machine Learning Using Combinatorial Testing and Active Learning
- Context-Aware Automated Sprint Plan Generation for Agile Software Development
- Contextualized Data-Wrangling Code Generation in Computational Notebooks
- ContractTinker: LLM-Empowered Vulnerability Repair for Real-World Smart Contracts
- Copilot-in-the-Loop: Fixing Code Smells in Copilot-Generated Python Code using Copilot
- CoqPilot, a plugin for LLM-based generation of proofs
- Cross-lingual Code Clone Detection: When LLMs Fail Short Against Embedding-based Classifier
- DRMiner: Extracting Latent Design Rationale from Jira Issue Logs
- DataRecipe - How to Cook the Data for CodeLLM?
- DeepREST: Automated Test Case Generation for REST APIs Exploiting Deep Reinforcement Learning
- Demonstration-Free: Towards More Practical Log Parsing with Large Language Models
- Depends-Kotlin: A Cross-Language Kotlin Dependency Extractor
- DeployFix: Dynamic Repair of Software Deployment Failures via Constraint Solving
- Detect Hidden Dependency to Untangle Commits
- Detecting Atomicity Violations for Interrupt-driven Programs via Systematic Scheduling and Prefix-directed Feedback
- Detecting Element Accessing Bugs in C++ Sequence Containers
- Detecting Malicious Accounts in Web3 through Transaction Graph
- Detecting and Explaining Anomalies Caused by Web Tamper Attacks via Building Consistency-based Normality
- DevMuT: Testing Deep Learning Framework via Developer Expertise-Based Mutation
- Developer-Applied Accelerations in Continuous Integration: A Detection Approach and Catalog of Patterns
- Diagnosis via Proofs of Unsatisfiability for First-Order Logic with Relational Objects
- Differential Fuzzing for Data Distribution Service Programs with Dynamic Configuration
- Discovering Likely Program Invariants for Persistent Memory
- Do not neglect what's on your hands: localizing software faults with exception trigger stream
- DroidCoder: Enhanced Android Code Completion with Context-Enriched Retrieval-Augmented Generation
- DroneWiS: Automated Simulation Testing of small Unmanned Aerial System in Realistic Windy Conditions
- DynaMO: Protecting Mobile DL Models through Coupling Obfuscated DL Operators
- Dynamic Scoring Code Token Tree: A Novel Decoding Strategy for Generating High-Performance Code
- Effective Unit Test Generation for Java Null Pointer Exceptions
- Effective Vulnerable Function Identification based on CVE Description Empowered by Large Language Models
- Efficient Code Causes Inefficiency in Compiler Optimizations
- Efficient Detection of Test Interference in C Projects
- Efficient Detection of Toxic Prompts in Large Language Models
- Efficient Incremental Code Coverage Analysis for Regression Test Suites
- Efficient Slicing of Feature Models via Projected d-DNNF Compilation
- Emergence of A Novel Domain Expert: A Generative AI-based Framework for Software Function Point Analysis
- Enabling Cost-Effective UI Automation Testing with Retrieval-Based LLMs: A Case Study in WeChat
- End-to-End AutoML for Unsupervised Log Anomaly Detection
- Enhancing Automated Program Repair with Solution Design
- Enhancing Compositional Static Analysis with Dynamic Analysis
- Enhancing Software Design and Developer Experience Via LLMs
- Enhancing the Efficiency of Automated Program Repair via Greybox Analysis
- Evaluating Terminology Translation in Machine Translation Systems via Metamorphic Testing
- Evaluation of Version Control Merge Tools
- Experience Report on Applying Program Analysis Techniques for Mainframe Application Understanding
- Exploring ChatGPT App Ecosystem: Distribution, Deployment and Security
- Exploring Parameter-Efficient Fine-Tuning of Large Language Model on Automated Program Repair
- FAIL: Analyzing Software Failures from the News Using LLMs
- FAST: Boosting Uncertainty-based Test Prioritization Methods for Neural Networks via Feature Selection
- FIPSER: Improving Fairness Testing of DNN by Seed Prioritization
- FaaSConf: QoS-aware Hybrid Resources Configuration for Serverless Workflows
- FastFixer: An Efficient and Effective Approach for Repairing Programming Assignments
- Feature Model Slicing for Real-time Selection of Mission-critical Edge Applicaiton
- Finding Performance Issues in Rust Projects
- FixKit: A Program Repair Collection for Python
- From Logging to Leakage: A Study of Privacy Leakage in Android App Logs
- GPP: A Graph-Powered Prioritizer for Code Review Requests
- GPTZoo: A Large-scale Dataset of GPTs for the Research Community
- GUI Test Repair Based on Test-Extension
- General and Practical Property-based Testing for Android Apps
- Getting Inspiration for Feature Elicitation: App Store- vs. LLM-based Approach
- Giving Every Modality a Voice in Microservice Failure Diagnosis via Multimodal Adaptive Optimization
- Giving without Notifying: Assessing Compliance of Data Transmission in Android Apps
- GlitchProber: Advancing Effective Detection and Mitigation of Glitch Tokens in Large Language Models
- GraphCoder: Enhancing Repository-Level Code Completion via Coarse-to-fine Retrieval Based on Code Context Graph
- GrayDuck: The Sword of Damocles for Duck Typing in Dynamic Language Deserialization
- HITS: High-coverage LLM-based Unit Test Generation via Method Slicing
- HighGuard: Cross-Chain Business Logic Monitoring of Smart Contracts
- How Does Code Optimization Impact Third-party Library Detection for Android Applications?
- How Effectively Do Code Language Models Understand Poor-Readability Code?
- How many pomodoros do professional engineers need to complete a microtask of programming?
- How to Pet a Two-Headed Snake? Solving Cross-Repository Compatibility Issues with Hera
- Hybrid Regression Test Selection by Integrating File and Method Dependences
- IdeoRate: Towards a Semi-automated Assessment Methodology for OSS Ideologies
- Imperceptible Content Poisoning in LLM-Powered Applications
- Improving the Comprehension of R Programs by Hybrid Dataflow Analysis
- In-Simulation Testing of Deep Learning Vision Models in Autonomous Robotic Manipulators
- Incremental Context-free Grammar Inference in Black Box Settings
- Industry Practice of Directed Kernel Fuzzing for Open-source Linux Distribution
- Instructive Code Retriever: Learn from Large Language Model's Feedback for Code Intelligence Tasks
- Integrating Mutation Testing Into Developer Workflow: An Industrial Case Study
- Interrogation Testing of Program Analyzers for Soundness and Precision Issues
- JavaBench: A Benchmark of Object-Oriented Code Generation for Evaluating Large Language Models
- LLM Meets Bounded Model Checking: Neuro-symbolic Loop Invariant Inference
- LLM-Based Java Concurrent Program to ArkTS Converter
- LLM-Generated Invariants for Bounded Model Checking Without Loop Unrolling
- LLM4Workflow: An LLM-based Automated Workflow Model Generation Tool
- LLMs and Prompting for Unit Test Generation: A Large-Scale Evaluation
- Language-Agnostic Static Analysis of Probabilistic Programs
- LeGEND: A Top-Down Approach to Scenario Generation of Autonomous Driving Systems Assisted by Large Language Models
- LeanBin: Harnessing Lifting and Recompilation to Debloat Binaries
- Learning DNN Abstractions using Gradient Descent
- Leveraging Large Language Model to Assist Detecting Rust Code Comment Inconsistency
- MADE-WIC: Multiple Annotated Datasets for Exploring Weaknesses In Code
- MLOLET - Machine Learning Optimized Load and Endurance Testing: An industrial experience report
- MR-Adopt: Automatic Deduction of Input Transformation Function for Metamorphic Testing
- MRCA: Metric-level Root Cause Analysis for Microservices via Multi-Modal Data
- Magneto: A Step-Wise Approach to Exploit Vulnerabilities in Dependent Libraries via LLM-Empowered Directed Fuzzing
- MaskDroid: Robust Android Malware Detection with Masked Graph Representations
- Match Word with Deed: Maintaining Consistency for IoT Systems with Behavior Models
- Microservice Decomposition Techniques: An Independent Tool Comparison
- MiniChecker: Detecting Data Privacy Risk of Abusive Permission Request Behavior in Mini-Programs
- Mining and Recommending Mobile App Features using Data-driven Analytics
- Mining for Mutation Operators for Reduction of Information Flow Control Violations
- Model-based GUI Testing For HarmonyOS Apps
- Models Are Codes: Towards Measuring Malicious Code Poisoning Attacks on Pre-trained Model Hubs
- Mutation-Based Deep Learning Framework Testing Method in JavaScript Environment
- Mutual Learning-Based Framework for Enhancing Robustness of Code Models via Adversarial Training
- Navigating Mobile Testing Evaluation: A Comprehensive Statistical Analysis of Android GUI Testing Metrics
- NeuroJIT: Improving Just-In-Time Defect Prediction Using Neurophysiological and Empirical Perceptions of Modern Developers
- Olympia: Fuzzer Benchmarking for Solidity
- On the Evaluation of Large Language Models in Unit Test Generation
- OpenTracer: A Dynamic Transaction Trace Analyzer for Smart Contract Invariant Generation and Beyond
- Oracle-Guided Vulnerability Diversity and Exploit Synthesis of Smart Contracts Using LLMs
- PACGBI: A Pipeline for Automated Code Generation from Backlog Items
- Parf: Adaptive Parameter Refining for Abstract Interpretation
- PatUntrack: Automated Generating Patch Examples for Issue Reports without Tracked Insecure Code
- PatchTrack: Analyzing ChatGPT's Impact on Software Patch Decision-Making in Pull Requests
- Preference-Guided Refactored Tuning for Retrieval Augmented Code Generation
- Prioritizing Test Inputs for DNNs Using Training Dynamics
- Prioritizing Tests for Improved Runtime
- Program Synthesis Meets Visual What-Comes-Next Puzzles
- Promise and Peril of Collaborative Code Generation Models: Balancing Effectiveness and Memorization
- Proof Automation with Large Language Models
- Quantitative Symbolic Non-Equivalence Analysis
- Quantum Program Testing Through Commuting Pauli Strings on IBM's Quantum Computers
- RCFG2Vec: Considering Long-Distance Dependency for Binary Code Similarity Detection
- REACT: IR-Level Patch Presence Test for Binary
- RMCBench: Benchmarking Large Language Models' Resistance to Malicious Code
- ROCAS: Root Cause Analysis of Autonomous Driving Accidents via Cyber-Physical Co-mutation
- Reducing Test Runtime by Transforming Test Fixtures
- Refinement Types for Visualization
- Repairing Regex-Dependent String Functions
- RepoGenix: Dual Context-Aided Repository-Level Code Completion with Language Models
- RepoSim: Evaluating Prompt Strategies for Code Completion via User Behavior Simulation
- Revisiting the Conflict-Resolving Problem from a Semantic Perspective
- Root Cause Analysis for Microservice System based on Causal Inference: How Far Are We?
- Rust-twins: Automatic Rust Compiler Testing through Program Mutation and Dual Macros Generation
- SLIM: a Scalable and Interpretable Light-weight Fault Localization Algorithm for Imbalanced Data in Microservice
- STASE: Static Analysis Guided Symbolic Execution for UEFI Vulnerability Signature Generation
- Same App, Different Behaviors: Uncovering Device-specific Behaviors in Android Apps
- Scaler: Efficient and Effective Cross Flow Analysis
- Seeding and Mocking in White-Box Fuzzing Enterprise RPC APIs: An Industrial Case Study
- Self-Elicitation of Requirements with Automated GUI Prototyping
- SemantiLog: Log-based Anomaly Detection with Semantic Similarity
- Semantic Sleuth: Identifying Ponzi Contracts via Large Language Models
- Semantic-Enhanced Indirect Call Analysis with Large Language Models
- Semantic-aware Source Code Modeling
- Semi-Automated Verification of Interior Unsafe Code Encapsulation in Real-World Rust Systems
- Semi-Supervised Code Translation Overcoming the Scarcity of Parallel Code Data
- Semistructured Merge with Language-Specific Syntactic Separators
- Shoot Yourself in the Foot - Efficient Code Causes Inefficiency in Compiler Optimizations
- Sifting through the Chaff: On Utilizing Execution Feedback for Ranking the Generated Code Candidates
- Skyeye: Detecting Imminent Attacks via Analyzing Adversarial Smart Contracts
- Slicer4D: A Slicing-based Debugger for Java
- Snopy: Bridging Sample Denoising with Causal Graph Learning for Effective Vulnerability Detection
- SoVAR: Build Generalizable Scenarios from Accident Reports for Autonomous Driving Testing
- Software Supply Chain Risk: Characterization, Measurement & Attenuation
- SpiderScan: Practical Detection of Malicious NPM Packages Based on Graph-Based Behavior Modeling and Matching
- Spotting Code Mutation for Predictive Mutation Testing
- Studying Versioning in Stack Overflow
- Syntactic Resilience in Greybox Fuzzing: Automated Error Recovery
- Test Case Generation for Simulink Models using Model Fuzzing and State Solving
- Test-Driven Development and LLM-based Code Generation
- The Importance of Accounting for Execution Failures when Predicting Test Flakiness
- The Potential of One-Shot Failure Root Cause Analysis: Collaboration of the Large Language Model and Small Classifier
- The Software Genome Project: Unraveling Software Through Genetic Principles
- Three Heads Are Better Than One: Suggesting Move Method Refactoring Opportunities with Inter-class Code Entity Dependency Enhanced Hybrid Hypergraph Neural Network
- To Tag, or Not to Tag: Translating C's Unions to Rust's Tagged Unions
- Toward Individual Fairness Testing with Data Validity
- Towards Automated Configuration Documentation
- Towards Effective Static Type-Error Detection for Python
- Towards Extracting Ethical Concerns-related Software Requirements from App Reviews
- Towards LLM-augmented multiagent systems for agile software engineering
- Towards Leveraging LLMs for Reducing Open Source Onboarding Information Overload
- Towards Long-Term Scientific Model Sustainment at Sandia National Laboratories
- Towards Robust Detection of Open Source Software Supply Chain Poisoning Attacks in Industry Environments
- Towards Robust ML-enabled Software Systems: Detecting Out-of-Distribution data using Gini Coefficients
- Towards Synthetic Trace Generation of Modeling Operations using In-Context Learning Approach
- Towards Understanding the Effectiveness of Large Language Models on Directed Test Input Generation
- Towards a Robust Waiting Strategy for Web GUI Testing for an Industrial Software System
- Translation Titans, Reasoning Challenges: Satisfiability-Aided Language Models for Detecting Conflicting Requirements
- Trident: Detecting SQL Injection Attacks via Abstract Syntax Tree-based Neural Network
- TypeFSL: Type Prediction from Binaries via Inter-procedural Data-flow Analysis and Few-shot Learning
- Typed and Confused: Studying the Unexpected Dangers of Gradual Typing
- UFront: Toward A Unified MLIR Frontend for Deep Learning
- Understanding Code Changes Practically with Small-Scale Language Models
- Understanding Developer-Analyzer Interactions in Code Reviews
- Understanding the Implications of Changes to Build Systems
- Unity Is Strength: Collaborative LLM-Based Agents for Code Reviewer Recommendation
- Unlocking the Power of Numbers: Log Compression via Numeric Token Parsing
- Unveiling the Characteristics and Impact of Security Patch Evolution
- Using AI to Automate the Modernization of Legacy Software Applications
- Using LLM for Mining and Testing Constraints in API Testing
- Vehicle Domain-Specific Language: Unifying Modeling and Code Generation for Low-Code Automotive Development
- Verifying the Option Type with Rely-Guarantee Reasoning
- Vision: Identifying Affected Library Versions for Open Source Software Vulnerabilities
- Visualizing and Understanding the Internals of Fuzzing
- VulAdvisor: Natural Language Suggestion Generation for Software Vulnerability Repair
- VulZoo: A Comprehensive Vulnerability Intelligence Dataset
- WaDec: Decompiling WebAssembly Using Large Language Model
- What Is Wrong with My Model? Identifying Systematic Problems with Semantic Data Slicing
- What Makes a High-Quality Training Dataset for Large Language Models: A Practitioners' Perspective
- flowR: A Static Program Slicer for R
- iSMELL: Assembling LLMs with Expert Toolsets for Code Smell Detection and Refactoring