Schedule

Venue:

Tuesdays at 12:30-2:20 in BLU10921
Fridays at 12:30-1:30 in SWH10061

This schedule is subject to change, although the general topics covered shall remain consistent.

Materials in the Preparation column should be read before class that day.

Week	Date	Topics	Preparation	Extra
1	Jan 6	Introduction Programming & Design
2	Jan 10	Programming & Design		Language Support for Generic Programming in Object-Oriented Languages: Design Challenges C++ templates/traits versus Haskell type classes Programming with GADTs (chapter) What is Gradual Typing?
2	Jan 13	Programming & Design traits demo using CRTP constraints using C++ concepts	1.1, 1.2, & 3 of On Understanding Types, Data Abstraction, and Polymorphism Universal Polymorphism	An Introduction to Software Architecture Identifying Monoids (Video) Category Theory for Programmers [As Videos]
3	Jan 17	Programming & Design Performance Last day to DROP! Ex1 DUE tomorrow!		Producing wrong data without doing anything obviously wrong! How NOT to Measure Latency - Gil Tene The Fallacy of Premature Optimization
3	Jan 20	Performance	The Truth, the Whole Truth, and Nothing but the Truth: A Pragmatic Guide to Assessing Empirical Evaluations	How not to lie with statistics: The correct way to summarize benchmark results - Fleming and Wallace War of the Benchmark Means: Time for a Truce MIT: Performance Engineering of Software Systems Understanding and Detecting Real-World Performance Bugs MITRE Performance Engineering Thinking Methodically about Performance [More detail][video] Why Aren't More Users More Happy With Our VMs? [Blog and Paper] Evaluation of microbenchmarking libraries for C++ Performance Comprehension at WiredTiger
4	Jan 24	Performance		Visualizing Performance with Flame Graphs Julia Evans' perf cheatsheet XRay Clang PGO [presentation] Clang LTO [presentation] Facebook BOLT [1][2][3][4] The Lost Art of Structure Packing The Elements of Cache Programming Style COZ: Finding Code that Counts with Causal Profiling DINAMITE: A modern approach to memory performance profiling Data-driven Spatial Locality A Unifying Abstraction for Data Structure Splicing Performance Matters - Emery Berger Godbolt Compiler Explorer
4	Jan 27	Performance Testing Ex2 DUE today!	Software Testing in the SWE Handbook	Cache-Conscious Data Structures HAT-trie: A Cache-conscious Trie-based Data Structure for Strings Cache-Aware Lock-Free Concurrent Hash Tries Cache-Oblivious Algorithms and Data Structures Cache-Oblivious Data Structures Practical Test Pyramid Mocks aren't stubs - Fowler
5	Jan 31	Testing		A Practical Tutorial on Modified Condition/Decision Coverage Efficient Mutation Analysis by Propagating and Partitioning Infected Execution States Topsy-Turvy: A Smarter and Faster Parallelization of Mutation Analysis Practical regression test selection with dynamic file dependencies Evaluating Regression Test Selection Opportunities in a Very Large Open-Source Ecosystem Hybrid Regression Test Selection SRRTA: Regression Testing Acceleration via State Reuse Revisiting the Relationship Between Fault Detection,Test Adequacy Criteria, and Test Set Size
5	Feb 3	Testing
6	Feb 7	What is a program? Formal tools Ex3 DUE today!		The Program Dependence Graph and Its Use in Optimization Pointer Analysis
6	Feb 10	Formal tools	Separation Logic
7	Feb 14	Proposals DUE tonight! Formal tools		A taste of linear logic Separation logic and bi-abduction Separation Logic Automating Separation Logic Using SMT Oxide: The Essence of Rust Dynamically Discovering Likely ProgramInvariants to Support Program Evolution SLING: Using Dynamic Analysis to Infer Program Invariants in Separation Logic Root Causing Flaky Tests in a Large-Scale Industrial Setting Error Invariants for Concurrent Traces Semantic Fault Localization and Suspiciousness Ranking Danger Invariants Tea: A High-level Language and Runtime System for Automating Statistical Analyses [Website] [Video] Discovering Relational Specifications
7	Feb 17	Formal tools
8	Feb 21	READING BREAK
8	Feb 24	READING BREAK
9	Feb 28	Formal tools Symbolic Execution	Symbolic Execution For Software Testing: Three Decades Later	A Survey of Symbolic Execution Techniques A segmented memory model for symbolic execution Proofs from Tests MultiSE: Multi-Path Symbolic Executionusing Value Summaries Type-Aware Concolic Testing of JavaScript Programs Symbolic Execution and Recent Applications to Worst-Case Execution, Load Testing and Security Analysis AEG: Automatic Exploit Generation Unleashing MAYHEM on Binary Code
9	Mar 3	Dynamic Analysis Ex4 DUE today!		The Concept of Dynamic Analysis Simplifying and isolating failure-inducing input Generalizing and Criticizing Delta Debugging Perses: Syntax-Guided Program Reduction Pardis: Priority Aware Test Case Reduction Minimizing Faulty Executions of Distributed Systems Delta Debugging Microservice Systems
10	Mar 7	Dynamic Analysis
10	Mar 10	Dynamic Analysis Using LLVM LLVM Demo		How to shadow every byte of memory used by a program SoK: Sanitizing for Security EffectiveSan: Type and Memory Error Detection using Dynamically Typed C/C++ Iodine: Fast Dynamic Taint Tracking UsingRollback-free Optimistic Hybrid Analysis
11	Mar 14	Dynamic Analysis		Identifying Execution Points For Dynamic Analyses Interactive record/replay for web application debugging Analyzing Concurrency Bugs Using Dual Slicing Differential Slicing: Identifying Causal Execution Differences for Security Applications Understanding Differences among Executions with Variational Traces
11	Mar 17	Dynamic Analysis		Comparative Causality: Explaining The Differences Between Executions Debugging for reactive programming
12	Mar 21	Static Analysis	Ch 5 of Static Program Analysis	Abstract Interpretation: A Unified Lattice Model for Static analysis of Programs by Construction or Approximation of Fixpoints Data flow analysis is model checking of abstract interpretations Combining Model Checking and Data-Flow Analysis A Unified Approach to Global Program Optimization Precise interprocedural dataflow analysis with applications to constant propagation Interprocedural Dataflow Analysis with IFDS/IDE and Soot Interprocedural Data Flow Analysis in Soot using Value Contexts Context-, Flow- and Field-Sensitive Data-Flow Analysis using Synchronized Pushdown Systems Generating Precise and Concise Procedure Summaries [Video]
12	Mar 24	Static Analysis
13	Mar 28	Static Analysis Parallelism & Concurrency Ex5 DUE yesterday!		Inter-procedural Data-flow Analysis with IFDS/IDE and Soot Precise Dataflow Analysis of Event-Driven Applications How to miscompile programs with “benign” data races Bounding Data Races in Space and Time Time, Clocks and the Ordering of Events in a Distributed System Virtual Time and Global States of Distributed Systems High-Coverage, Unbounded Sound Predictive Race Detection
13	Mar 31	Parallelism & Concurrency		Atomizer: A Dynamic Atomicity Checker For Multithreaded Programs Avio: AVIO: Detecting Atomicity Violations via Access Interleaving Invariants Effective race detection for event-driven programs AI: A Lightweight System for Tolerating Concurrency Bugs COZ: Finding Code that Counts with Causal Profiling [video]
14	Apr 4	Security	FuzzFactory: Domain-Specific Fuzzing with Waypoints [video]	A Survey on Automated Dynamic Malware Analysis Techniques and Tools The Advanced Persistent Threat Sherlock Holmes and the Case of the Advanced Persistent Threat Malwarebytes: The Advanced Persistent Threat Files Trends, challenge, and shifts in software vulnerability mitigation[Video] PoC \|\| or GTFO [on archive.org] Phrack Trail of Bits Blog
14	Apr 7	HOLIDAY
15	Apr 11	Security Review & Wrapping up Final Projects Due Ex6 DUE today!		Security in the Software Development Lifecycle "Think secure from the beginning": A Survey with Software Developers A Contemporary Look at Saltzer and Schroeder's 1975 Design Principles Some thoughts on security after ten years of qmail 1.0 Privilege separation in HTML5 applications [video] Identifying and Resolving Least Privilege Violations in Software Architectures Formal Approaches to Secure Compilation -- A Survey of Fully Abstract Compilation and Related Work