Which is better? Asking your distant Uncle Barry for the Top10 restaurants in NY or consulting the Michelin Guide? Well, turns out that bug-based fuzzer benchmarking is much like Uncle Barry. Random and noisy. Accepted at #FSE26. Led by Ardi Madadi, @is-eqv.bsky.social, and @nimgnoeseel.bsky.social
Seongmin Lee
@nimgnoeseel.bsky.social
🎲 A board game geek, 🏸 a badminton lover, and a postdoc researcher @UCLA working on dynamic and statistical program analysis.
🚨 Our amazing #FUZZING'25 keynotes are online! "Constraining Fuzzing without Paying Too Much" by Miryung Kim youtu.be/L90MBb6NLBE "Are you sure you belong in academia?" by Will Wilson youtu.be/qQGuQ_4V6WI // @mboehme.bsky.social, László Szekeres, @rohan.padhye.org, @ruijiemeng.bsky.social
We had two exciting keynotes: * From academia: Miryung Kim (Prof @ UCLA) * From industry: Will Wilson (CEO and Co-Founder of @AntithesisHQ.bsky.social). Stay tuned for recordings!
💥 Fuzzing found a crash—but how do we debug it? We present DiffMin, a technique that makes crashing inputs closer to passing ones while keeping the crash. This helps localize and diagnose crashes more precisely. Just accepted to FSE’25 Posters 🎉 📄 arxiv.org/abs/2505.02305 #FSE25 #fuzzing #debugging
Refining Fuzzed Crashing Inputs for Better Fault Diagnosis
We present DiffMin, a technique that refines a fuzzed crashing input to gain greater similarities to given passing inputs to help developers analyze the crashing input to identify the failure-inducing...
arxiv.org
A new look! We have created a new version of The Fuzzing Book, based on #JupyterBook, bringing * easier navigation * dark mode * search * mobile layout and lots of other features. Check it out at www.fuzzingbook.org/beta/html/in... Should we continue with this new look? Comments are welcome!
Feature of our #ICLR'25 Spotlight paper, just presented in Singapore. www.mpi-sp.org/81927/news_p...
How solving classic probability problems can help computer scientists find bugs
How solving classic probability problems can help computer scientists find bugs
mpi-sp.org
In today's #AST2025 keynote on our new #Fandango fuzzer, I presented ongoing extensions for protocol fuzzing, oracle checking, coverage guidance, much more. Slides now available: conf.researchr.org/details/ast-...
Personalized Fuzzing (AST 2025) - AST 2025
The 6th ACM/IEEE International Conference on Automation of Software Test (AST 2025) Software pervasiveness in both industry and digital society, as well as the proliferation of Artificial Intelligenc...
conf.researchr.org
What do you get if you combine #grammars, #constraints, #evolutionary algorithms, and #Python in one? A mighty fuzzer! Check out our latest #FANDANGO work, to appear at #ISSTA2025: publications.cispa.de/articles/sta... To try out Fandango yourself, check out its home page: fandango-fuzzer.github.io
Our paper "Top Score on the Wrong Exam" paper will be presented at #ISSTA25 🐣 in Trondheim! 📝https://mpi-softsec.github.io/papers/ISSTA25-topscore.pdf 🧑💻https://github.com/niklasrisse/TopScoreWrongExam // @nrisse.bsky.social @fuzzing.bsky.social
Can we foresee the unseen in software testing? I’ll share how statistical magic helps us quantify residual risk and make testing results more accountable and reliable✨Thanks for the invite! 🙏 Join my tutorial @ SBST (co-located w/ ICSE) 🖥️ sbft25.github.io 📅 28.04. 14:30 GMT-4 (live on Twitch too)
🎉 Excited to share that my 1st paper at @iclr-conf.bsky.social has been accepted! Big thanks to my awesome colleague @mboehme.bsky.social and the fantastic SoftSec group #MPI. Marcel has shared a great post with a brief explanation of our work—check it out! 🚀 I’ll share a public version soon!
Just got our first ICLR paper accepted! 🥳🥳 It shines light on a beautiful statistical riddle! Suppose, you train a classifier. How representative was the training data? What is the proportion of the *unknown* population of classifier inputs with classes *not* in the training data? Led by Seongmin.