Grammar Mutation for Testing Input Parsers (Registered Report)

Bendrissou, Bachir; Cadar, Cristian; Donaldson, Alastair F.

doi:10.1145/3605157.3605170

Cited by 3 publications

(2 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For example, we did not discover some parser bugs triggered by malformed policies because our test generators create abstract syntax trees of Cedar policies and thus are limited to produce only syntactically correct policies. We are investigating grammar-based mutation testing [3] to avoid missing this type of bug in the future.…”

Section: Experiencementioning

confidence: 99%

How We Built Cedar: A Verification-Guided Approach

Disselkoen,

Eline,

et al. 2024

Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering

View full text Add to dashboard Cite

This paper presents verification-guided development (VGD), a software engineering process we used to build Cedar, a new policy language for expressive, fast, safe, and analyzable authorization. Developing a system with VGD involves writing an executable model of the system and mechanically proving properties about the model; writing production code for the system and using differential random testing (DRT) to check that the production code matches the model; and using property-based testing (PBT) to check properties of unmodeled parts of the production code. Using VGD for Cedar, we can build fast, idiomatic production code, prove our model correct, and find and fix subtle implementation bugs that evade code reviews and unit testing. While carrying out proofs, we found and fixed 4 bugs in Cedar's policy validator, and DRT and PBT helped us find and fix 21 additional bugs in various parts of Cedar. CCS CONCEPTS• Security and privacy → Formal methods and theory of security; Authorization; • Software and its engineering → Software development techniques.

show abstract

Section: Experiencementioning

confidence: 99%

How We Built Cedar: A Verification-Guided Approach

Disselkoen,

Eline,

et al. 2024

Companion Proceedings of the 32nd ACM International Conference on the Foundations of Software Engineering

View full text Add to dashboard Cite

show abstract

“…It has evolved to include feedback (coverage-guided) [8,18,48] and smart search heuristics (search-based fuzzing) [7,46]. Some fuzzing works at the specification level (often using an input grammar) [6,21,59] while the majority of fuzzing techniques are greybox (using code-guided metrics to diversify coverage of program paths in the code) [7,8,18,46,48]. Finally, scenario-based approaches represent an alternative approach for specification-based fuzzing [10,22,61].…”

Section: Test Fuzzermentioning

confidence: 99%

Reconstruction of Aleppo, Syria: A Design Studio at the University of Notre Dame, Usa

CHAMBERS

2022

Islamic Heritage Architecture IV

View full text Add to dashboard Cite

As we think about how to rebuild communities that have suffered destruction, it is imperative to discuss the recovery of architecture and culture. As the world of architectural education trends towards teaching the design of buildings that create "placelessness", we must teach students to look deeply at history, to synthesize its lessons, and apply them sensitively and appropriately. Aleppo in Syria has a rich heritage of Islamic architecture that spans millennia. While the destruction of Aleppo has left a scar in the hearts of its people, it is possible to rebuild using the lessons and forms of traditional architecture. At the University of Notre Dame, our current studio of fourth year students is studying and proposing how a neighborhood in the historic city center might begin to be rebuilt. This studio is a teaching tool that allows students to engage with a culture that is foreign to them; to see and apply universal principles adapted for climate, culture, and building technologies that have been honed locally over thousands of years. The core of the studio is analysis of traditional Syrian architecture, looking at how the architecture supports the community and engages with the unique climate. The students study how traditional building technologies, like dome and vault construction, support the functions housed within these forms. They delve into the distinguished history of craft as they study architectural ornament. All these lessons are ultimately applied to a building project, which they program, conceptually develop, and design at the scales of the urban, building, and detail. These students, while they may be practicing far away from Aleppo, are preserving the heritage of a place that has seen so much destruction. Their work is a testament to the power of design in recovering the memory of a city.

show abstract