Schedule

Venue

Tuesdays at 1:30-2:20 in WMC 2220
Thursdays at 12:30-2:20 in WMC 2200

This schedule is subject to change, although the general topics covered shall remain consistent.

Materials in the Preparation column should be read before class that day.

Week	Date	Topics	Preparation	Extra
1	Sep 3	Introduction Programming & Design
1	Sep 5	Programming & Design		Language Support for Generic Programming in Object-Oriented Languages: Design Challenges C++ templates/traits versus Haskell type classes Programming with GADTs (chapter) What is Gradual Typing?
2	Sep 10	Programming & Design	1.1, 1.2, & 3 of On Understanding Types, Data Abstraction, and Polymorphism Universal Polymorphism	An Introduction to Software Architecture Identifying Monoids (Video) Category Theory for Programmers [As Videos]
2	Sep 12	Programming & Design Performance		Producing wrong data without doing anything obviously wrong! How NOT to Measure Latency - Gil Tene The Fallacy of Premature Optimization
3	Sep 17	Ex1 DUE last night! Performance	The Truth, the Whole Truth, and Nothing but the Truth: A Pragmatic Guide to Assessing Empirical Evaluations	How not to lie with statistics: The correct way to summarize benchmark results - Fleming and Wallace War of the Benchmark Means: Time for a Truce MIT: Performance Engineering of Software Systems Understanding and Detecting Real-World Performance Bugs MITRE Performance Engineering Thinking Methodically about Performance [More detail][video] Why Aren't More Users More Happy With Our VMs? [Blog and Paper] Evaluation of microbenchmarking libraries for C++ Performance Comprehension at WiredTiger
3	Sep 19	Performance		Visualizing Performance with Flame Graphs Julia Evans' perf cheatsheet XRay Clang PGO [presentation] Clang LTO [presentation] Facebook BOLT [1][2][3][4] The Lost Art of Structure Packing The Elements of Cache Programming Style COZ: Finding Code that Counts with Causal Profiling DINAMITE: A modern approach to memory performance profiling Data-driven Spatial Locality Performance Matters - Emery Berger Godbolt Compiler Explorer
4	Sep 24	Performance Testing	Software Testing in the SWE Handbook	Cache-Conscious Data Structures HAT-trie: A Cache-conscious Trie-based Data Structure for Strings Cache-Aware Lock-Free Concurrent Hash Tries Cache-Oblivious Algorithms and Data Structures Cache-Oblivious Data Structures
4	Sep 26	Ex2 DUE tomorrow night! Testing		Practical Test Pyramid Mocks aren't stubs - Fowler Efficient Mutation Analysis by Propagating and Partitioning Infected Execution States Topsy-Turvy: A Smarter and Faster Parallelization of Mutation Analysis Practical regression test selection with dynamic file dependencies Evaluating Regression Test Selection Opportunities in a Very Large Open-Source Ecosystem Hybrid Regression Test Selection
5	Oct 1	What is a program?		The Program Dependence Graph and Its Use in Optimization Pointer Analysis
5	Oct 3	Formal tools	Separation Logic
6	Oct 8	Formal tools		A taste of linear logic Separation logic and bi-abduction Separation Logic Automating Separation Logic Using SMT Oxide: The Essence of Rust Dynamically Discovering Likely ProgramInvariants to Support Program Evolution SLING: Using Dynamic Analysis to Infer ProgramInvariants in Separation Logic Root Causing Flaky Tests in a Large-Scale Industrial Setting Error Invariants for Concurrent Traces Semantic Fault Localization and Suspiciousness Ranking Danger Invariants Tea: A High-level Language and Runtime System for Automating Statistical Analyses [Website] [Video] Discovering Relational Specifications
6	Oct 10	Symbolic Execution Property Based Testing Ex3 DUE tonight!	Symbolic Execution For Software Testing: Three Decades Later	A Survey of Symbolic Execution Techniques A segmented memory model for symbolic execution Proofs from Tests MultiSE: Multi-Path Symbolic Executionusing Value Summaries Type-Aware Concolic Testing of JavaScript Programs Symbolic Execution and Recent Applications to Worst-Case Execution, Load Testing and Security Analysis AEG: Automatic Exploit Generation Unleashing MAYHEM on Binary Code
7	Oct 15	Dynamic Analysis		The Concept of Dynamic Analysis SoK: Sanitizing for Security
7	Oct 17	Dynamic Analysis		Identifying Execution Points For Dynamic Analyses Analyzing Concurrency Bugs Using Dual Slicing Differential Slicing: Identifying Causal Execution Differences forSecurity Applications Comparative Causality: Explaining The Differences Between Executions Understanding Differences among Executions with Variational Traces Debugging for reactive programming Interactive record/replay for web application debugging
8	Oct 22	Static Analysis	Ch 5 of Static Program Analysis
8	Oct 24	Static Analysis		A Unified Approach to Global Program Optimization Precise interprocedural dataflow analysis with applications to constant propagation Interprocedural Dataflow Analysis with IFDS/IDE and Soot Interprocedural Data Flow Analysis in Soot using Value Contexts Context-, Flow- and Field-Sensitive Data-Flow Analysis using Synchronized Pushdown Systems Generating Precise and Concise Procedure Summaries [Video]
9	Oct 29	Static Analysis Ex4 DUE last night!		Precise Dataflow Analysis of Event-Driven Applications
9	Oct 31	Parallelism & Concurrency		How to miscompile programs with “benign” data races Bounding Data Races in Space and Time Time, Clocks and the Ordering of Events in a Distributed System Virtual Time and Global States of Distributed Systems High-Coverage, Unbounded Sound Predictive Race Detection
10	Nov 5	Parallelism & Concurrency		Atomizer: A Dynamic Atomicity Checker For Multithreaded Programs Avio: AVIO: Detecting Atomicity Violations via Access Interleaving Invariants Effective race detection for event-driven programs AI: A Lightweight System for Tolerating Concurrency Bugs COZ: Finding Code that Counts with Causal Profiling [video]
10	Nov 7	Security Ex5 DUE tonight!		A Survey on Automated Dynamic Malware Analysis Techniques and Tools The Advanced Persistent Threat Sherlock Holmes and the Case of the Advanced Persistent Threat Malwarebytes: The Advanced Persistent Threat Files
11	Nov 12	Security		Trends, challenge, and shifts in software vulnerability mitigation[Video]
11	Nov 14	Security	FuzzFactory: Domain-Specific Fuzzing with Waypoints [video]
12	Nov 19	Security		PoC \|\| or GTFO [on archive.org] Phrack Trail of Bits Blog
12	Nov 21	Ex6 DUE tonight! Security
13	Nov 26	Security		Security in the Software Development Lifecycle "Think secure from the beginning": A Survey with Software Developers A Contemporary Look at Saltzer and Schroeder's 1975 Design Principles Some thoughts on security after ten years of qmail 1.0 Privilege separation in HTML5 applications [video] Identifying and Resolving Least Privilege Violations in Software Architectures Formal Approaches to Secure Compilation -- A Survey of Fully Abstract Compilation and Related Work
13	Nov 28	Synthesis
14	Dec 3	NO CLASS Ex7 DUE tonight! Final Projects Due