41 citations · 76 across the 7 of their papers we have counts for
7 papers
Not In My Git Yard: Catching Backdoors at Commit and Release Time
Dimitri Kokkonis, Michaël Marcozzi, Stefano Zacchiroli
Code-level backdoors-stealthy code changes that grant hidden privileges via secret triggers-pose a persistent threat to opensource software. Known attempts to inject such backdoors…
ROSA: Finding Backdoors with Fuzzing
Dimitri Kokkonis, Michaël Marcozzi, Emilien Decoux +1
A code-level backdoor is a hidden access, programmed and concealed within the code of a program. For instance, hard-coded credentials planted in the code of a file server applicati…
A Systematic Impact Study for Fuzzer-Found Compiler Bugs
Michaël Marcozzi, Qiyi Tang, Alastair F. Donaldson +1
Despite much recent interest in compiler randomized testing (fuzzing), the practical impact of fuzzer-found compiler bugs on real-world applications has barely been assessed. We pr…
Freeing Testers from Polluting Test Objectives
Michaël Marcozzi, Sébastien Bardin, Nikolai Kosmatov +3
Testing is the primary approach for detecting software defects. A major challenge faced by testers lies in crafting efficient test suites, able to detect a maximum number of bugs w…
Generic and Effective Specification of Structural Test Objectives
Sébastien Bardin, Mickaël Delahaye, Nikolai Kosmatov +2
While a wide range of different, sometimes heterogeneous test coverage criteria have been proposed, there exists no generic formalism to describe them, and available test automatio…
A Symbolic Execution Algorithm for Constraint-Based Testing of Database Programs
Michaël Marcozzi, Wim Vanhoof, Jean-Luc Hainaut
In so-called constraint-based testing, symbolic execution is a common technique used as a part of the process to generate test data for imperative programs. Databases are ubiquitou…
A Direct Symbolic Execution of SQL Code for Testing of Data-Oriented Applications
Michaël Marcozzi, Wim Vanhoof, Jean-Luc Hainaut
Symbolic execution is a technique which enables automatically generating test inputs (and outputs) exercising a set of execution paths within a program to be tested. If the paths c…