Schedule

Venue

MWF at 3:30-4:20 in Canvas

This schedule is subject to change, although the general topics covered shall remain consistent.

Materials in the Preparation column should be read before class that day.

Recordings of lectures are available after the fact via BB Collaborate.

Week	Date	Topics	Preparation	Extra
1	Jan 11	Introduction Programming & Design
	Jan 13	Programming & Design		Language Support for Generic Programming in Object-Oriented Languages: Design Challenges C++ templates/traits versus Haskell type classes Programming with GADTs (chapter) What is Gradual Typing?
	Jan 15	Programming & Design
2	Jan 18	Programming & Design traits demo using CRTP constraints using C++ concepts	1.1, 1.2, & 3 of On Understanding Types, Data Abstraction, and Polymorphism Universal Polymorphism	An Introduction to Software Architecture Identifying Monoids (Video) Category Theory for Programmers [As Videos]
	Jan 20	Programming & Design
	Jan 22	Performance		Producing wrong data without doing anything obviously wrong! How NOT to Measure Latency - Gil Tene The Fallacy of Premature Optimization
3	Jan 25	Last day to DROP yesterday! Ex1 DUE tonight! Performance	The Truth, the Whole Truth, and Nothing but the Truth: A Pragmatic Guide to Assessing Empirical Evaluations	How not to lie with statistics: The correct way to summarize benchmark results - Fleming and Wallace War of the Benchmark Means: Time for a Truce MIT: Performance Engineering of Software Systems Understanding and Detecting Real-World Performance Bugs MITRE Performance Engineering Thinking Methodically about Performance [More detail][video] Why Aren't More Users More Happy With Our VMs? [Blog and Paper] Evaluation of microbenchmarking libraries for C++ Performance Comprehension at WiredTiger
	Jan 27	Performance		Visualizing Performance with Flame Graphs Julia Evans' perf cheatsheet XRay Clang PGO [presentation] Clang LTO [presentation] Facebook BOLT [1][2][3][4]
	Jan 29	Performance		The Lost Art of Structure Packing The Elements of Cache Programming Style COZ: Finding Code that Counts with Causal Profiling DINAMITE: A modern approach to memory performance profiling Data-driven Spatial Locality A Unifying Abstraction for Data Structure Splicing Performance Matters - Emery Berger Godbolt Compiler Explorer
4	Feb 1	Performance Testing	Software Testing in the SWE Handbook	Cache-Conscious Data Structures HAT-trie: A Cache-conscious Trie-based Data Structure for Strings Cache-Aware Lock-Free Concurrent Hash Tries Cache-Oblivious Algorithms and Data Structures Cache-Oblivious Data Structures Practical Test Pyramid Mocks aren't stubs - Fowler
	Feb 3	Testing		A Practical Tutorial on Modified Condition/Decision Coverage
	Feb 5	Ex2 DUE tonight! Testing		Efficient Mutation Analysis by Propagating and Partitioning Infected Execution States Topsy-Turvy: A Smarter and Faster Parallelization of Mutation Analysis Practical regression test selection with dynamic file dependencies Evaluating Regression Test Selection Opportunities in a Very Large Open-Source Ecosystem Hybrid Regression Test Selection SRRTA: Regression Testing Acceleration via State Reuse Revisiting the Relationship Between Fault Detection,Test Adequacy Criteria, and Test Set Size
5	Feb 8	Testing
	Feb 10	What is a program?		The Program Dependence Graph and Its Use in Optimization Pointer Analysis
	Feb 12	What is a program? Formal tools Ex3 DUE tonight!
6	Feb 15	READING BREAK
	Feb 17	READING BREAK
	Feb 19	READING BREAK
7	Feb 22	Formal tools	Separation Logic
	Feb 24	Proposals DUE tonight! Formal tools		A taste of linear logic Separation logic and bi-abduction Separation Logic Automating Separation Logic Using SMT Oxide: The Essence of Rust Dynamically Discovering Likely ProgramInvariants to Support Program Evolution SLING: Using Dynamic Analysis to Infer Program Invariants in Separation Logic Root Causing Flaky Tests in a Large-Scale Industrial Setting Error Invariants for Concurrent Traces Semantic Fault Localization and Suspiciousness Ranking Danger Invariants Tea: A High-level Language and Runtime System for Automating Statistical Analyses [Website] [Video] Discovering Relational Specifications
	Feb 26	Formal tools
8	Mar 1	Symbolic Execution	Symbolic Execution For Software Testing: Three Decades Later	A Survey of Symbolic Execution Techniques A segmented memory model for symbolic execution Proofs from Tests MultiSE: Multi-Path Symbolic Executionusing Value Summaries Type-Aware Concolic Testing of JavaScript Programs Symbolic Execution and Recent Applications to Worst-Case Execution, Load Testing and Security Analysis AEG: Automatic Exploit Generation Unleashing MAYHEM on Binary Code
	Mar 3	Dynamic Analysis		The Concept of Dynamic Analysis
	Mar 5	Dynamic Analysis		Simplifying and isolating failure-inducing input Generalizing and Criticizing Delta Debugging Perses: Syntax-Guided Program Reduction Pardis: Priority Aware Test Case Reduction Minimizing Faulty Executions of Distributed Systems Delta Debugging Microservice Systems
9	Mar 8	Ex4 DUE tonight! Dynamic Analysis Using LLVM LLVM Demo		How to shadow every byte of memory used by a program SoK: Sanitizing for Security EffectiveSan: Type and Memory Error Detection using Dynamically Typed C/C++ Iodine: Fast Dynamic Taint Tracking UsingRollback-free Optimistic Hybrid Analysis
	Mar 10	Dynamic Analysis		Identifying Execution Points For Dynamic Analyses Interactive record/replay for web application debugging
	Mar 12	Dynamic Analysis		Analyzing Concurrency Bugs Using Dual Slicing Differential Slicing: Identifying Causal Execution Differences for Security Applications Understanding Differences among Executions with Variational Traces
10	Mar 15	Dynamic Analysis		Comparative Causality: Explaining The Differences Between Executions Debugging for reactive programming
	Mar 17	Static Analysis	Ch 5 of Static Program Analysis	Abstract Interpretation: A Unified Lattice Model for Static analysis of Programs by Construction or Approximation of Fixpoints Data flow analysis is model checking of abstract interpretations Combining Model Checking and Data-Flow Analysis
	Mar 19	Static Analysis		A Unified Approach to Global Program Optimization Precise interprocedural dataflow analysis with applications to constant propagation Interprocedural Dataflow Analysis with IFDS/IDE and Soot Interprocedural Data Flow Analysis in Soot using Value Contexts Context-, Flow- and Field-Sensitive Data-Flow Analysis using Synchronized Pushdown Systems Generating Precise and Concise Procedure Summaries [Video]
11	Mar 22	Static Analysis
	Mar 24	Static Analysis		Inter-procedural Data-flow Analysis with IFDS/IDE and Soot Precise Dataflow Analysis of Event-Driven Applications
	Mar 26	Ex5 DUE tonight! Parallelism & Concurrency		How to miscompile programs with “benign” data races Bounding Data Races in Space and Time Time, Clocks and the Ordering of Events in a Distributed System Virtual Time and Global States of Distributed Systems High-Coverage, Unbounded Sound Predictive Race Detection
12	Mar 29	Parallelism & Concurrency		Atomizer: A Dynamic Atomicity Checker For Multithreaded Programs Avio: AVIO: Detecting Atomicity Violations via Access Interleaving Invariants Effective race detection for event-driven programs AI: A Lightweight System for Tolerating Concurrency Bugs COZ: Finding Code that Counts with Causal Profiling [video]
	Mar 31	Security		A Survey on Automated Dynamic Malware Analysis Techniques and Tools The Advanced Persistent Threat Sherlock Holmes and the Case of the Advanced Persistent Threat Malwarebytes: The Advanced Persistent Threat Files Trends, challenge, and shifts in software vulnerability mitigation[Video]
	Apr 2	HOLIDAY
13	Apr 5	HOLIDAY
	Apr 7	Security	FuzzFactory: Domain-Specific Fuzzing with Waypoints [video]	PoC \|\| or GTFO [on archive.org] Phrack Trail of Bits Blog
	Apr 9	Security		Security in the Software Development Lifecycle "Think secure from the beginning": A Survey with Software Developers A Contemporary Look at Saltzer and Schroeder's 1975 Design Principles Some thoughts on security after ten years of qmail 1.0 Privilege separation in HTML5 applications [video] Identifying and Resolving Least Privilege Violations in Software Architectures Formal Approaches to Secure Compilation -- A Survey of Fully Abstract Compilation and Related Work
14	Apr 12	Ex6 DUE tonight! Synthesis
	Apr 14	Synthesis
	Apr 16	Review & Wrapping up Final Projects Due