240 citations · 1.4k across the 52 of their papers we have counts for
56 papers
Mapping the Trust Terrain: LLMs in Software Engineering -- Insights and Perspectives
Dipin Khati, Yijin Liu, David N. Palacio +2
Applications of Large Language Models (LLMs) are rapidly growing in industry and academia for various software engineering (SE) tasks. As these models become more integral to criti…
Testing Practices, Challenges, and Developer Perspectives in Open-Source IoT Platforms
Daniel Rodriguez-Cardenas, Safwat Ali Khan, Prianka Mandal +3
As the popularity of Internet of Things (IoT) platforms grows, users gain unprecedented control over their homes, health monitoring, and daily task automation. However, the testing…
Lost in Transmission: An Information-Theoretic Account of Unsupervised Software Traceability
Daniel Rodriguez-Cardenas, David N. Palacio, Logan Fecko +2
Traceability remains a critical capability to ensure system reliability, maintainability, and compliance in modern software development. Although unsupervised Information Retrieval…
Towards More Trustworthy and Interpretable LLMs for Code through Syntax-Grounded Explanations
David N. Palacio, Daniel Rodriguez-Cardenas, Alejandro Velasco +3
Trustworthiness and interpretability are inextricably linked concepts for LLMs. The more interpretable an LLM is, the more trustworthy it becomes. However, current techniques for i…
Helion: Enabling Natural Testing of Smart Homes
Prianka Mandal, Sunil Manandhar, Kaushal Kafle +3
Prior work has developed numerous systems that test the security and safety of smart homes. For these systems to be applicable in practice, it is necessary to test them with realis…
MASC: A Tool for Mutation-Based Evaluation of Static Crypto-API Misuse Detectors
Amit Seal Ami, Syed Yusuf Ahmed, Radowan Mahmud Redoy +5
While software engineers are optimistically adopting crypto-API misuse detectors (or crypto-detectors) in their software development cycles, this momentum must be accompanied by a…
Evaluating and Explaining Large Language Models for Code Using Syntactic Structures
David N Palacio, Alejandro Velasco, Daniel Rodriguez-Cardenas +2
Large Language Models (LLMs) for code are a family of high-parameter, transformer-based neural networks pre-trained on massive datasets of both natural and programming languages. T…
"False negative -- that one is going to kill you": Understanding Industry Perspectives of Static Analysis based Security Testing
Amit Seal Ami, Kevin Moran, Denys Poshyvanyk +1
The demand for automated security analysis techniques, such as static analysis based security testing (SAST) tools continues to increase. To develop SASTs that are effectively leve…
AidUI: Toward Automated Recognition of Dark Patterns in User Interfaces
SM Hasan Mansur, Sabiha Salma, Damilola Awofisayo +1
Past studies have illustrated the prevalence of UI dark patterns, or user interfaces that can lead end-users toward (unknowingly) taking actions that they may not have intended. Su…
ChatGPT and Software Testing Education: Promises & Perils
Sajed Jalil, Suzzana Rafi, Thomas D. LaToza +2
Over the past decade, predictive language modeling for code has proven to be a valuable tool for enabling new forms of automation for developers. More recently, we have seen the ad…
BURT: A Chatbot for Interactive Bug Reporting
Yang Song, Junayed Mahmud, Nadeeshan De Silva +5
This paper introduces BURT, a web-based chatbot for interactive reporting of Android app bugs. BURT is designed to assist Android app end-users in reporting high-quality defect inf…
Toward a Theory of Causation for Interpreting Neural Code Models
David N. Palacio, Alejandro Velasco, Nathan Cooper +3
Neural Language Models of Code, or Neural Code Models (NCMs), are rapidly progressing from research prototypes to commercial developer tools. As such, understanding the capabilitie…
An Empirical Investigation into the Reproduction of Bug Reports for Android Apps
Jack Johnson, Junayed Mahmud, Tyler Wendland +3
One of the key tasks related to ensuring mobile app quality is the reporting, management, and resolution of bug reports. As such, researchers have committed considerable resources…
An Empirical Investigation into the Use of Image Captioning for Automated Software Documentation
Kevin Moran, Ali Yachnes, George Purnell +5
Existing automated techniques for software documentation typically attempt to reason between two main sources of information: code and natural language. However, this reasoning pro…
Translating Video Recordings of Complex Mobile App UI Gestures into Replayable Scenarios
Carlos Bernal-Cárdenas, Nathan Cooper, Madeleine Havranek +4
Screen recordings of mobile applications are easy to obtain and capture a wealth of information pertinent to software developers (e.g., bugs or feature requests), making them a pop…
Avgust: Automating Usage-Based Test Generation from Videos of App Executions
Yixue Zhao, Saghar Talebipour, Kesina Baral +6
Writing and maintaining UI tests for mobile apps is a time-consuming and tedious task. While decades of research have produced automated approaches for UI test generation, these ap…
Toward Interactive Bug Reporting for (Android App) End-Users
Yang Song, Junayed Mahmud, Ying Zhou +4
Many software bugs are reported manually, particularly bugs that manifest themselves visually in the user interface. End-users typically report these bugs via app reviewing website…
Enhancing Mobile App Bug Reporting via Real-time Understanding of Reproduction Steps
Mattia Fazzini, Kevin Moran, Carlos Bernal Cardenas +3
One of the primary mechanisms by which developers receive feedback about in-field failures of software from users is through bug reports. Unfortunately, the quality of manually wri…
Mutation-based Evaluation of Cryptographic API Misuse Detectors
Amit Seal Ami, Scott Marsden, Kevin Moran +2
The correct use of cryptography is central to ensuring data security in modern software systems. Hence, several academic and commercial static analysis tools have been developed fo…
Code to Comment Translation: A Comparative Study on Model Effectiveness & Errors
Junayed Mahmud, Fahim Faisal, Raihan Islam Arnob +2
Automated source code summarization is a popular software engineering research topic wherein machine translation models are employed to "translate" code snippets into relevant natu…
AndroR2: A Dataset of Manually Reproduced Bug Reports for Android Applications
Tyler Wendland, Jingyang Sun, Junayed Mahmud +5
Software maintenance constitutes a large portion of the software development lifecycle. To carry out maintenance tasks, developers often need to understand and reproduce bug report…
V2S: A Tool for Translating Video Recordings of Mobile App Usages into Replayable Scenarios
Madeleine Havranek, Carlos Bernal-Cárdenas, Nathan Cooper +3
Screen recordings are becoming increasingly important as rich software artifacts that inform mobile application development processes. However, the amount of manual effort required…
SE: Mutation-based Evaluation of Security-focused Static Analysis Tools for Android
Amit Seal Ami, Kaushal Kafle, Kevin Moran +2
This demo paper presents the technical details and usage scenarios of SE: a mutation-based tool for evaluating security-focused static analysis tools for Android. Mutation testi…
Systematic Mutation-based Evaluation of the Soundness of Security-focused Android Static Analysis Techniques
Amit Seal Ami, Kaushal Kafle, Kevin Moran +2
Mobile application security has been a major area of focus for security research over the course of the last decade. Numerous application analysis tools have been proposed in respo…