This is a nonexhaustive list of interesting papers and background materials. Feel free to suggest another paper that interests you! You might look through the proceedings of ISSTA, ICSE, PLDI, FSE, ICST, ASPLOS, ICSM, ASE, ISMM, Middleware, ICPC, POPL, Usenix Security, SAS, or WODA.

Concurrency & Parallelism

• Understanding and generating high quality patches for concurrency bugs
• AI: A Lightweight System for Tolerating Concurrency Bugs
• REMIX: Online Detection and Repair of Cache Contention for the JVM
• Parallel Data Race Detection for Task Parallel Programs with Locks
• Precise and maximal race detection from incomplete traces
• Directed synthesis of failing concurrent executions

Testing

• On The Limits of Mutation Reduction Strategies
• Type-Aware Concolic Testing of JavaScript Programs
• MobiPlay: A Remote Execution Based Record-and-Replay Tool for Mobile Applications
• Can testedness be effectively measured?
• What Makes Killing a Mutant Hard?
• Micro Execution

Performance

• Automating performance bottleneck detection using search-based application profiling

Code Quality

• On the "Naturalness" of Buggy Code
• Code Anomalies Flock Together
• Automatically Recommending Peer Reviewers in Modern Code Review

Analysis Frameworks

• Revamping JavaScript static analysis via localization and remediation of root causes of imprecision
• ESP: Path-Sensitive Program Verification in Polynomial Time
• From Datalog to FLIX: A Declarative Language for Fixed Points on Lattices
• IncA: A DSL for the Definition of Incremental Program Analyses
• Weighted Pushdown Systems and their Application to Interprocedural Dataflow Analysis

Bugs

• Angelix: Scalable Multiline Program Patch Synthesis via Symbolic Analysis
• Automatically Learning Semantic Features for Defect Prediction
• AntMiner: Mining More Bugs by Reducing Noise Interference
• BigDebug: Debugging Primitives for Interactive Big Data Processing in Spark
• RETracer: Triaging Crashes by Reverse Execution from Partial Memory Dumps
• Minimizing GUI event traces
• Fine-Tuning Spectrum Based Fault Localisation with Frequent Method Item Sets
• Casper: Debugging Null Dereferences with Dynamic Causality Traces
• Minimizing Faulty Executions of Distributed Systems

Similarity

• Statistical Similarity of Binaries
• SourcererCC: Scaling Code Clone Detection to Big-Code
• BinGo: Cross-Architecture Cross-OS Binary Search
• Cross-Architecture Bug Search in Binary Executables
• Winnowing: Local Algorithms for Document Fingerprinting

Learning

• Dynamically discovering likely program invariants to support program evolution
• PR-Miner: automatically extracting implicit programming rules and detecting violations in large software code
• Classifying software changes: Clean or buggy?
• Automatic Generation of Object Usage Specifications from Large Method Traces
• Merlin: specification inference for explicit information flow problems
• Inferring extended finite state machine models from software executions
• Learning a Static Analyzer from Data
• FEAST: An Automated Feature Selection Framework for Compilation Tasks
• Probabilistic model for code with decision trees
• Accelerating program analyses by cross-program training
• Inferring Method Specifications from Natural Language API Descriptions

Reverse Engineering

• Reverse Engineering Input Syntactic Structure from Program Execution and Its Applications
• Mining input grammars from dynamic taints
• Extracting Output Formats from Executables
• Compiler-Agnostic Function Detection in Binaries
• An improved algorithm for slicing machine code
• MARX: Uncovering Class Hierarchies in C++ Programs

Offense and Defense

• Finding Vulnerabilities
  1. Enhancing symbolic execution with veritesting
  2. Unleashing Mayhem on Binary Code
  3. Driller: Augmenting Fuzzing Through Selective Symbolic Execution
  4. Coverage-based Greybox Fuzzing as Markov Chain
  5. VUzzer: Application-aware Evolutionary Fuzzing
  6. (State of) The Art of War: Offensive Techniques in Binary Analysis
  7. Symbolic Execution of Obfuscated Code
  8. Code obfuscation against symbolic execution attacks
  9. Targeting Infeasibility Questions on Obfuscated Codes
  10. Grammar-based Whitebox Fuzzing
  11. Under-Constrained Symbolic Execution: Correctness Checking for Real Code
• Defense
  1. DieHarder: Securing the Heap github
  2. ASLR-Guard: Stopping Address Space Leakage for Code Reuse Attacks
  3. Enforcing Kernel Security Invariants with Data Flow Integrity
  4. VTrust: Regaining Trust on Virtual Calls
  5. A Tough call: Mitigating Advanced Code-Reuse Attacks At The Binary Level
• Attack
  1. Flip Feng Shui: Hammering a Needle in the Software Stack
  2. Dynamic hooks: hiding control flow changes within non-control data
  3. Control Jujutsu: On the Weaknesses of Fine-Grained Control Flow Integrity
  4. Exploiting and Protecting Dynamic Code Generation
  5. Automatically Evading Classifiers: A Case Study on PDF Malware Classifiers