7 papers
PR-Aware Automated Unit Test Generation: Challenges and Opportunities
Vahid Haratian, Atakan Akar, Berk Ãakar +1
Automated test generation has a substantial body of work, yet most studies focus on generating tests for complete software units, such as classes, and rely on metrics such as code…
Towards the Systematic Testing of Regular Expression Engines
Berk Ãakar, Dongyoon Lee, James C. Davis
Software engineers use regular expressions (regexes) across a wide range of domains and tasks. To support regexes, software projects must integrate a regex engine, whether provided…
Regular Expression Denial of Service Induced by Backreferences
Yichen Liu, Berk Ãakar, Aman Agrawal +3
This paper presents the first systematic study of denial-of-service vulnerabilities in Regular Expressions with Backreferences (REwB). We introduce the Two-Phase Memory Automaton (…
Towards a Benchmark for Dependency Decision-Making
Tanmay Singla, Berk Ãakar, Paschal C. Amusuo +1
AI coding agents increasingly modify real software repositories and make dependency decisions, including adding, removing, or updating third-party packages. These choices can mater…
Is Reuse All You Need? A Systematic Comparison of Regular Expression Composition Strategies
Berk Ãakar, Charles M. Sale, Sophie Chen +2
Composing regexes is a common but challenging engineering activity. Software engineers struggle with regex complexity, leading to defects, performance issues, and security vulnerab…
SoK: A Literature and Engineering Review of Regular Expression Denial of Service (ReDoS)
Masudul Hasan Masud Bhuiyan, Berk Ãakar, Ethan H. Burmane +2
Regular Expression Denial of Service (ReDoS) is a vulnerability class that has become prominent in recent years. Attackers can weaponize such weaknesses as part of asymmetric cyber…