Publication

MINERVA: Browser API Fuzzing with Dynamic Mod-Ref Analysis

Related publications (32)

Elastic Program Transformations

Performance and reliability are important yet conflicting properties of systems software. Software today often crashes, has security vulnerabilities and data loss, while many techniques that could address such issues remain unused due to performance concer ...

EPFL2017

B-hist: Entity-centric search over personal web browsing history

Karl Aberer, Philippe Cudré-Mauroux, Michele Catasta, Jean-Eudes Marie Ranvier

Web Search is increasingly entity centric; as a large fraction of common queries target specific entities, search results get progressively augmented with semi-structured and multimedia information about those entities. However, search over personal web br ...

Elsevier2014

Model-based automated testing of critical PLC programs

Jean-Charles Tournier, Simon Bliudze

Testing of critical PLC (Programmable Logic Controller) programs remains a challenging task for control system engineers as it can rarely be automated. This paper proposes a model-based approach which uses the BIP (Behavior, Interactions and Priorities) fr ...

IEEE2013

Efficient State Merging in Symbolic Execution

George Candea, Johannes Kinder, Volodymyr Kuznetsov, Stefan Bucur

Symbolic execution has proven to be a practical technique for building automated test case generation and bug finding tools. Nevertheless, due to state explosion, these tools still struggle to achieve scalability. Given a program, one way to reduce the num ...

ACM2012

Efficient State Merging in Symbolic Execution

George Candea, Johannes Kinder, Volodymyr Kuznetsov, Stefan Bucur

Assoc Computing Machinery2012

Some Things You Always Wanted to Know About Web Pages (But Were Too Busy to Ask)

Willy Zwaenepoel, Simon Schubert

The organic growth of the web has led to web sites that exhibit a large variety of properties. We conduct a large- scale study to gain quantitative insights into the browser-side effects of the structure and behavior of thousands of the most popular web si ...

2012

WaRR: A Tool for High-Fidelity Web Application Record and Replay

George Candea, Silviu Andrica

We introduce WaRR, a tool that records and replays with high ﬁdelity the interaction between users and modern web applications. WaRR consists of two independent components: the WaRR Recorder and the WaRR Replayer. The WaRR Recorder is embedded in a web bro ...

Ieee Service Center, 445 Hoes Lane, Po Box 1331, Piscataway, Nj 08855-1331 Usa2011

Efficient Testing of Recovery Code Using Fault Injection

George Candea, Paul Dan Marinescu

A critical part of developing a reliable software system is testing its recovery code. This code is traditionally difficult to test in the lab, and, in the field, it rarely gets to run; yet, when it does run, it must execute flawlessly in order to recover ...

2011

Integrity of the Web Content: The Case of Online Advertising

Jean-Pierre Hubaux, Julien Freudiger, Nevena Vratonjic

Online advertising is a major source of revenues in the Internet. In this paper, we identify a number of vulnerabilities of current ad serving systems. We describe how an adversary can exploit these vulnerabilities to divert part of the ad revenue stream f ...

2010

An Extensible Technique for High-Precision Testing of Recovery Code

George Candea, Paul Dan Marinescu, Radu Banabic

Thorough testing of software systems requires ways to productively employ fault injection. We describe a technique for automatically identifying the errors exposed by shared libraries, finding good injection targets in program binaries, and producing corre ...

2010

Graph Chatbot

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.