Schedule

Venue:

Tuesdays at 2:30-4:20 in AQ 5037
Thursdays at 2:30-3:20 in AQ 4150

This schedule is subject to change, although the general topics covered shall remain consistent.

Materials in the Preparation column should be read before class that day.

Week	Date	Topics	Preparation	Extra
1	Jan 6	Introduction Programming & Design		An extended comparative study of language support for generic programming Language Support for Generic Programming in Object-Oriented Languages: Design Challenges Programming with GADTs (chapter) Gradual Typing from Theory to Practice [more]
1	Jan 8	Programming & Design
2	Jan 13	Programming & Design traits demo using CRTP constraints using C++ concepts Yesterday: Last day to DROP	1.1, 1.2, 1.3, & 3 (pp.1-7&14-15) of On Understanding Types, Data Abstraction, and Polymorphism Universal Polymorphism	An Introduction to Software Architecture Identifying Monoids (Video) Category Theory for Programmers [As Videos]
2	Jan 15	Performance		Producing wrong data without doing anything obviously wrong! How NOT to Measure Latency - Gil Tene The Fallacy of Premature Optimization
3	Jan 20	Performance	The Truth, the Whole Truth, and Nothing but the Truth: A Pragmatic Guide to Assessing Empirical Evaluations	How not to lie with statistics: The correct way to summarize benchmark results - Fleming and Wallace War of the Benchmark Means: Time for a Truce The USE method of performance analysis MIT: Performance Engineering of Software Systems Understanding and Detecting Real-World Performance Bugs MITRE Performance Engineering (p.528) Thinking Methodically about Performance [More detail][video] Why Aren't More Users More Happy With Our VMs? [Blog and Paper] Evaluation of microbenchmarking libraries for C++ Performance Comprehension at WiredTiger Abseil Performance Tips
3	Jan 22	Performance		Visualizing Performance with Flame Graphs Julia Evans' perf cheatsheet XRay Clang PGO [presentation] Clang LTO [presentation] Facebook BOLT [1][2][3][4] The Lost Art of Structure Packing The Elements of Cache Programming Style COZ: Finding Code that Counts with Causal Profiling DINAMITE: A modern approach to memory performance profiling Data-driven Spatial Locality A Unifying Abstraction for Data Structure Splicing Performance Matters - Emery Berger Godbolt Compiler Explorer Cache-Conscious Data Structures HAT-trie: A Cache-conscious Trie-based Data Structure for Strings Cache-Aware Lock-Free Concurrent Hash Tries Cache-Oblivious Algorithms and Data Structures Cache-Oblivious Data Structures
4	Jan 27	Testing	Software Testing in the SWE Handbook	Practical Test Pyramid Mocks aren't stubs - Fowler
4	Jan 29	Testing		A Practical Tutorial on Modified Condition/Decision Coverage Efficient Mutation Analysis by Propagating and Partitioning Infected Execution States Topsy-Turvy: A Smarter and Faster Parallelization of Mutation Analysis Practical regression test selection with dynamic file dependencies Evaluating Regression Test Selection Opportunities in a Very Large Open-Source Ecosystem Hybrid Regression Test Selection SRRTA: Regression Testing Acceleration via State Reuse Revisiting the Relationship Between Fault Detection,Test Adequacy Criteria, and Test Set Size
5	Feb 3	What is a program?		The Program Dependence Graph and Its Use in Optimization Pointer Analysis
5	Feb 5	Symbolic Execution	Symbolic Execution For Software Testing: Three Decades Later	A Survey of Symbolic Execution Techniques A segmented memory model for symbolic execution Proofs from Tests MultiSE: Multi-Path Symbolic Executionusing Value Summaries Type-Aware Concolic Testing of JavaScript Programs Symbolic Execution and Recent Applications to Worst-Case Execution, Load Testing and Security Analysis AEG: Automatic Exploit Generation Unleashing MAYHEM on Binary Code
6	Feb 10	Formal tools Proposals DUE Tuesday!	Separation Logic	A taste of linear logic Separation logic and bi-abduction Separation Logic Automating Separation Logic Using SMT Oxide: The Essence of Rust Dynamically Discovering Likely ProgramInvariants to Support Program Evolution SLING: Using Dynamic Analysis to Infer Program Invariants in Separation Logic Root Causing Flaky Tests in a Large-Scale Industrial Setting Error Invariants for Concurrent Traces Semantic Fault Localization and Suspiciousness Ranking Danger Invariants Tea: A High-level Language and Runtime System for Automating Statistical Analyses [Website] [Video] Discovering Relational Specifications
6	Feb 12	Formal tools
7	Feb 17	READING WEEK
7	Feb 19	READING WEEK
8	Feb 24	Dynamic Analysis		The Concept of Dynamic Analysis Simplifying and isolating failure-inducing input Generalizing and Criticizing Delta Debugging Perses: Syntax-Guided Program Reduction Pardis: Priority Aware Test Case Reduction Minimizing Faulty Executions of Distributed Systems Delta Debugging Microservice Systems
8	Feb 26	Dynamic Analysis
9	Mar 3	Dynamic Analysis Using LLVM LLVM Demo		How to shadow every byte of memory used by a program SoK: Sanitizing for Security EffectiveSan: Type and Memory Error Detection using Dynamically Typed C/C++ Iodine: Fast Dynamic Taint Tracking Using Rollback-free Optimistic Hybrid Analysis
9	Mar 5	Dynamic Analysis		Identifying Execution Points For Dynamic Analyses Interactive record/replay for web application debugging Analyzing Concurrency Bugs Using Dual Slicing Differential Slicing: Identifying Causal Execution Differences for Security Applications Understanding Differences among Executions with Variational Traces
10	Mar 10	Dynamic Analysis Static Analysis	Ch 5 of Static Program Analysis	Comparative Causality: Explaining The Differences Between Executions Debugging for reactive programming
10	Mar 12	Static Analysis		Abstract Interpretation: A Unified Lattice Model for Static analysis of Programs by Construction or Approximation of Fixpoints Data flow analysis is model checking of abstract interpretations Combining Model Checking and Data-Flow Analysis A Unified Approach to Global Program Optimization Precise interprocedural dataflow analysis with applications to constant propagation Interprocedural Dataflow Analysis with IFDS/IDE and Soot Interprocedural Data Flow Analysis in Soot using Value Contexts Context-, Flow- and Field-Sensitive Data-Flow Analysis using Synchronized Pushdown Systems Generating Precise and Concise Procedure Summaries [Video]
11	Mar 17	Static Analysis Parallelism & Concurrency		Inter-procedural Data-flow Analysis with IFDS/IDE and Soot Precise Dataflow Analysis of Event-Driven Applications
11	Mar 19	Parallelism & Concurrency		How to miscompile programs with “benign” data races Bounding Data Races in Space and Time Time, Clocks and the Ordering of Events in a Distributed System Virtual Time and Global States of Distributed Systems High-Coverage, Unbounded Sound Predictive Race Detection
12	Mar 24	Parallelism & Concurrency Security		Atomizer: A Dynamic Atomicity Checker For Multithreaded Programs Avio: AVIO: Detecting Atomicity Violations via Access Interleaving Invariants Effective race detection for event-driven programs AI: A Lightweight System for Tolerating Concurrency Bugs COZ: Finding Code that Counts with Causal Profiling [video]
12	Mar 26	Security
13	Mar 31	Security	FuzzFactory: Domain-Specific Fuzzing with Waypoints [video]	A Survey on Automated Dynamic Malware Analysis Techniques and Tools The Advanced Persistent Threat Sherlock Holmes and the Case of the Advanced Persistent Threat Malwarebytes: The Advanced Persistent Threat Files Trends, challenge, and shifts in software vulnerability mitigation[Video] PoC \|\| or GTFO [on archive.org] Phrack Trail of Bits Blog
13	Apr 2	Security		Security in the Software Development Lifecycle "Think secure from the beginning": A Survey with Software Developers A Contemporary Look at Saltzer and Schroeder's 1975 Design Principles Some thoughts on security after ten years of qmail 1.0 Privilege separation in HTML5 applications [video] Identifying and Resolving Least Privilege Violations in Software Architectures Formal Approaches to Secure Compilation -- A Survey of Fully Abstract Compilation and Related Work
14	Apr 7	LLMs in SE? Wrapping Up Projects DUE Friday
14	Apr 9	Review All questions answered