Schedule

Venue:

Mondays at 4:30-7:20 in AQ3181

This schedule is subject to change, although the general topics covered shall remain consistent.

Materials in the Preparation column should be read before class that day.

Week	Date	Topics	Preparation	Extra
1	May 12	Introduction Programming & Design		An extended comparative study of language support for generic programming Language Support for Generic Programming in Object-Oriented Languages: Design Challenges Programming with GADTs (chapter) Gradual Typing from Theory to Practice [more]
2	May 19	Victoria Day No Class Monday Recorded class TBA Programming & Design traits demo using CRTP constraints using C++ concepts Performance Yesterday: Last day to DROP Ex1 DUE Friday!	1.1, 1.2, 1.3, & 3 (pp.1-7&14-15) of On Understanding Types, Data Abstraction, and Polymorphism Universal Polymorphism	An Introduction to Software Architecture Identifying Monoids (Video) Category Theory for Programmers [As Videos] Producing wrong data without doing anything obviously wrong! How NOT to Measure Latency - Gil Tene The Fallacy of Premature Optimization
3	May 26	Performance	The Truth, the Whole Truth, and Nothing but the Truth: A Pragmatic Guide to Assessing Empirical Evaluations	How not to lie with statistics: The correct way to summarize benchmark results - Fleming and Wallace War of the Benchmark Means: Time for a Truce The USE method of performance analysis MIT: Performance Engineering of Software Systems Understanding and Detecting Real-World Performance Bugs MITRE Performance Engineering (p.528) Thinking Methodically about Performance [More detail][video] Why Aren't More Users More Happy With Our VMs? [Blog and Paper] Evaluation of microbenchmarking libraries for C++ Performance Comprehension at WiredTiger Visualizing Performance with Flame Graphs Julia Evans' perf cheatsheet XRay Clang PGO [presentation] Clang LTO [presentation] Facebook BOLT [1][2][3][4] The Lost Art of Structure Packing The Elements of Cache Programming Style COZ: Finding Code that Counts with Causal Profiling DINAMITE: A modern approach to memory performance profiling Data-driven Spatial Locality A Unifying Abstraction for Data Structure Splicing Performance Matters - Emery Berger Godbolt Compiler Explorer Cache-Conscious Data Structures HAT-trie: A Cache-conscious Trie-based Data Structure for Strings Cache-Aware Lock-Free Concurrent Hash Tries Cache-Oblivious Algorithms and Data Structures Cache-Oblivious Data Structures
4	Jun 2	Testing Ex2 DUE Tuesday!	Software Testing in the SWE Handbook	Practical Test Pyramid Mocks aren't stubs - Fowler A Practical Tutorial on Modified Condition/Decision Coverage Efficient Mutation Analysis by Propagating and Partitioning Infected Execution States Topsy-Turvy: A Smarter and Faster Parallelization of Mutation Analysis Practical regression test selection with dynamic file dependencies Evaluating Regression Test Selection Opportunities in a Very Large Open-Source Ecosystem Hybrid Regression Test Selection SRRTA: Regression Testing Acceleration via State Reuse Revisiting the Relationship Between Fault Detection,Test Adequacy Criteria, and Test Set Size
5	Jun 9	What is a program? Symbolic Execution Formal tools Ex3 DUE Fri!	Symbolic Execution For Software Testing: Three Decades Later	The Program Dependence Graph and Its Use in Optimization Pointer Analysis A Survey of Symbolic Execution Techniques A segmented memory model for symbolic execution Proofs from Tests MultiSE: Multi-Path Symbolic Executionusing Value Summaries Type-Aware Concolic Testing of JavaScript Programs Symbolic Execution and Recent Applications to Worst-Case Execution, Load Testing and Security Analysis AEG: Automatic Exploit Generation Unleashing MAYHEM on Binary Code
6	Jun 16	Formal tools Proposals DUE Tuesday!	Separation Logic	A taste of linear logic Separation logic and bi-abduction Separation Logic Automating Separation Logic Using SMT Oxide: The Essence of Rust Dynamically Discovering Likely ProgramInvariants to Support Program Evolution SLING: Using Dynamic Analysis to Infer Program Invariants in Separation Logic Root Causing Flaky Tests in a Large-Scale Industrial Setting Error Invariants for Concurrent Traces Semantic Fault Localization and Suspiciousness Ranking Danger Invariants Tea: A High-level Language and Runtime System for Automating Statistical Analyses [Website] [Video] Discovering Relational Specifications
7	Jun 23	Dynamic Analysis		The Concept of Dynamic Analysis Simplifying and isolating failure-inducing input Generalizing and Criticizing Delta Debugging Perses: Syntax-Guided Program Reduction Pardis: Priority Aware Test Case Reduction Minimizing Faulty Executions of Distributed Systems Delta Debugging Microservice Systems
8	Jun 30	Dynamic Analysis Using LLVM LLVM Demo		How to shadow every byte of memory used by a program SoK: Sanitizing for Security EffectiveSan: Type and Memory Error Detection using Dynamically Typed C/C++ Iodine: Fast Dynamic Taint Tracking Using Rollback-free Optimistic Hybrid Analysis Identifying Execution Points For Dynamic Analyses Interactive record/replay for web application debugging Analyzing Concurrency Bugs Using Dual Slicing Differential Slicing: Identifying Causal Execution Differences for Security Applications Understanding Differences among Executions with Variational Traces
9	Jul 7	Dynamic Analysis Static Analysis	Ch 5 of Static Program Analysis	Comparative Causality: Explaining The Differences Between Executions Debugging for reactive programming Abstract Interpretation: A Unified Lattice Model for Static analysis of Programs by Construction or Approximation of Fixpoints Data flow analysis is model checking of abstract interpretations Combining Model Checking and Data-Flow Analysis A Unified Approach to Global Program Optimization Precise interprocedural dataflow analysis with applications to constant propagation Interprocedural Dataflow Analysis with IFDS/IDE and Soot Interprocedural Data Flow Analysis in Soot using Value Contexts Context-, Flow- and Field-Sensitive Data-Flow Analysis using Synchronized Pushdown Systems Generating Precise and Concise Procedure Summaries [Video]
10	Jul 14	Static Analysis Ex5 DUE today! Parallelism & Concurrency		Inter-procedural Data-flow Analysis with IFDS/IDE and Soot Precise Dataflow Analysis of Event-Driven Applications How to miscompile programs with “benign” data races Bounding Data Races in Space and Time Time, Clocks and the Ordering of Events in a Distributed System Virtual Time and Global States of Distributed Systems High-Coverage, Unbounded Sound Predictive Race Detection
11	Jul 21	Parallelism & Concurrency Security		Atomizer: A Dynamic Atomicity Checker For Multithreaded Programs Avio: AVIO: Detecting Atomicity Violations via Access Interleaving Invariants Effective race detection for event-driven programs AI: A Lightweight System for Tolerating Concurrency Bugs COZ: Finding Code that Counts with Causal Profiling [video]
12	Jul 28	Security	FuzzFactory: Domain-Specific Fuzzing with Waypoints [video]	A Survey on Automated Dynamic Malware Analysis Techniques and Tools The Advanced Persistent Threat Sherlock Holmes and the Case of the Advanced Persistent Threat Malwarebytes: The Advanced Persistent Threat Files Trends, challenge, and shifts in software vulnerability mitigation[Video] PoC \|\| or GTFO [on archive.org] Phrack Trail of Bits Blog Security in the Software Development Lifecycle "Think secure from the beginning": A Survey with Software Developers A Contemporary Look at Saltzer and Schroeder's 1975 Design Principles Some thoughts on security after ten years of qmail 1.0 Privilege separation in HTML5 applications [video] Identifying and Resolving Least Privilege Violations in Software Architectures Formal Approaches to Secure Compilation -- A Survey of Fully Abstract Compilation and Related Work
13	Aug 4	BC Day No Class Monday Optional class TBA Review & Wrapping up All questions answered LLMs in SE? Ex6 DUE Tuesday! Projects DUE Friday