Marcel Böhme
@mboehme.bsky.social
Software Security @ MPI for Security and Privacy PhD @NUS, Dipl.-Inf. @TUDresden Research Group: http://mpi-softsec.github.io
🔥 Our industry keynote at #FUZZING'26 is online! Where the Fuzz Are We Going? by Sergej Dechand (Code Intelligence) 🌍 fuzzing-workshop.github.io www.youtube.com/watch?v=yp-A...
NDSS 2026 - FUZZING 2026, Keynote 2 by Sergej Dechand
YouTube video by NDSS Symposium
youtube.com
🔥 Our academic keynote at #FUZZING'26 is online! Advancing from "What the fuzz?" to "All the Fuzz" by Mathias Payer (@gannimo.bsky.social). 🌍 fuzzing-workshop.github.io youtu.be/In3kRAVVbzQ?...
NDSS 2026 - FUZZING 2026, Welcome and Opening Remarks, and Keynote by Mathias Payer
YouTube video by NDSS Symposium
youtu.be
Thrilled to give a keynote at ACM India's ISEC'26 in Jaipur this Friday! How do we know whether our program has no bugs if we have never seen it have any, and if we don't even have anything (i.e., an oracle) that can tell us whether a behavior is a bug or feature? Stick around till Friday!
Hopefully, it will allow us to refocus on what truly matters in science, on big problems, on intuition and insights, on theory building, and away from the brute mechanics of publishing and the bean counting that has put the breaks on true progress in science. hegemon.substack.com/p/the-age-of...
The Age of Academic Slop is Upon Us
what happens when AI automates "normal science"?
hegemon.substack.com
Which is better? Asking your distant Uncle Barry for the Top10 restaurants in NY or consulting the Michelin Guide? Well, turns out that bug-based fuzzer benchmarking is much like Uncle Barry. Random and noisy. Accepted at #FSE26. Led by Ardi Madadi, @is-eqv.bsky.social, and @nimgnoeseel.bsky.social
I have been named an ACM Distinguished Member for "contributions to software security and fuzz testing". Happy and honored! A heartfelt *Thank You* to my nominator and all of you who endorsed and supported me - today and throughout my entire career. 1/2
Association for Computing Machinery@acm.org · 9mo agoACM has named 61 new Distinguished Members for 2025! 🌍💡 Recognized for breakthroughs in computing and dedicated service to our community, this diverse group represents top institutions across 15 countries. Congratulations to the 2025 class! buff.ly/rajUhe6 #ACMDistinguishedMembers #computing
Many Max Planck scientists have started sharing their #research findings on #BlueSky. Follow their posts and join the conversation! 👋 go.bsky.app/BYcBy6R #StarterPack
📢 Call for Papers for ISSTA 2026 We invite high-quality submissions on software testing and analysis from industry and academia, incl. * research papers * experience papers, and * replicability studies. 📆 29th January 2026 🖊️ issta2026.hotcrp.com 🌐 conf.researchr.org/track/issta-...
ISSTA 2026 - Research papers - ISSTA 2026
Welcome to the website of the ISSTA 2026 conference. The ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA) is the leading research symposium on software testing and analysis...
conf.researchr.org
⏱️ 9 days until submission deadline (Dec 11, 23:59 AoE). Organized by: @yannicnoller.bsky.social, @rohan.padhye.org, @ruijiemeng.bsky.social, and Laszlo (@lszekeres.bsky.social) Szekeres.
Yannic Noller@yannicnoller.bsky.social · 11mo ago#FUZZING'26 CALL FOR PAPERS ────── ✨ After 5 years, we will be again co-located with NDSS! 🔗 fuzzing-workshop.github.io 📅 11. Dec (Submission) //cc @mboehme.bsky.social (MPI-SP), @ruijiemeng.bsky.social (CISPA), @rohan.padhye.org (CMU), László Szekeres (Google)
Dearly beloved, we are gathered here today to celebrate this thing called ASE 2025 ;) @aseconf.bsky.social @mboehme.bsky.social @llingming.bsky.social
🎙️ #ASE2025 Keynote Speaker Series (1 of 3) What do symbolic model checking, path profiling, and quantum simulation have in common? 🤔 Find out from Prof. Reps (University of Wisconsin-Madison) in his ASE2025 Keynote “We Will Publish No Algorithm Before Its Time”! conf.researchr.org/track/ase-20...
🎙️ ASE 2025 Keynote Speaker Series (3 of 3) Prof. Taesoo Kim (Georgia Tech) “Hyperscale Bug Finding and Fixing: DARPA AIxCC” conf.researchr.org/track/ase-20...
🎙️ #ASE2025 Keynote Speaker Series (2 of 3) Dr. Cristina Cifuentes, Vice President @ Oracle Software Assurance “Oracle Parfait – Detecting Application Vulnerabilities at Scale – Past, Present and Future”
🧵 A human review of our AI review at #AAAI26. 📝: arxiv.org/abs/2507.00057 🦋 : bsky.app/profile/did:... We are off to a good start. While the synopsis misses the motivation (*why* this is interesting), it offers the most important points. Good abstract-length summary. 1/
Marcel Böhme@mboehme.bsky.social · 10mo agoJust accepted at #AAAI26 in Singapore: Our paper on estimating the *correctness* of LLM-generated code in the absence of oracles (e.g., a ground-truth implementation). 📝 arxiv.org/abs/2507.00057 with Thomas Valentin (ENS Paris-Saclay), Ardi Madadi, and Gaetano Sapia (#MPI_SP).
Just accepted at #AAAI26 in Singapore: Our paper on estimating the *correctness* of LLM-generated code in the absence of oracles (e.g., a ground-truth implementation). 📝 arxiv.org/abs/2507.00057 with Thomas Valentin (ENS Paris-Saclay), Ardi Madadi, and Gaetano Sapia (#MPI_SP).
Neat idea: Snapshot fuzzing from a certain point deeper in the target (with +- complex state), then use an AI Agent to trigger that point. Fuzzer goes brrr
Marcel Böhme@mboehme.bsky.social · 10mo agoGaetano's paper on Scaling Security Testing by Adressing the Reachability Gap has been accepted at #ICSE26! 📝 gpsapia.github.io/files/ICSE_2... 🧑💻 github.com/GPSapia/Reac... How to scale automatic security testing to arbitrary systems?
Gaetano's paper on Scaling Security Testing by Adressing the Reachability Gap has been accepted at #ICSE26! 📝 gpsapia.github.io/files/ICSE_2... 🧑💻 github.com/GPSapia/Reac... How to scale automatic security testing to arbitrary systems?
Must-read for fuzzing folks (read: tooling/algorithms/academia) by Addison Crump addisoncrump.info/research/wha...
What the hell are we doing? · Addison Crump
Homepage for Addison Crump
addisoncrump.info
AAAI'26 has been adopting AI reviews in two stages of the review process. I can see that we have to handle the reviewer overload, but I don't think AI reviews are beneficial, at all, for our scientific progress. If our paper gets accepted at #AAAI26, I will review our AI-generated review here 🤠
Presented our #CCS25 paper yesterday in Taipei! 🎤 We introduce Circuzz, the first systematic fuzzing framework for zero-knowledge (ZK) pipelines. 📄 Paper: mariachris.github.io/Pubs/CCS-202... 💻 Repo: github.com/Rigorous-Sof... with @isychev.bsky.social, @vwuestholz.bsky.social, Maria Christakis
The early bird registration for #ASE2025 is still open! 📅 Early deadline: Oct 15, 2025 🧾 Regular deadline: Nov 2, 2025 All accepted papers must have at least one regular (non-student) registration for inclusion in the proceedings. 👉 Details: conf.researchr.org/attending/ase-2025/registration
Registration - ASE 2025
Welcome to the website of the 40th IEEE/ACM International Conference on Automated Software Engineering, ASE 2025. The ASE conference is the premier research forum for Automated Software Engineering. E...
conf.researchr.org
After 5 years, we are back at NDSS in San Diego! Looking forward to submissions from the Security and the Software Engineering community!
Yannic Noller@yannicnoller.bsky.social · 11mo ago#FUZZING'26 CALL FOR PAPERS ────── ✨ After 5 years, we will be again co-located with NDSS! 🔗 fuzzing-workshop.github.io 📅 11. Dec (Submission) //cc @mboehme.bsky.social (MPI-SP), @ruijiemeng.bsky.social (CISPA), @rohan.padhye.org (CMU), László Szekeres (Google)
GUIFuzz++ is the first general-purpose fuzzer for desktop GUI software! Fuzzing by translating AFL++ random input into user interaction with GUIs, leading to the discovery of 23 new bugs! Paper: futures.cs.utah.edu/papers/25ASE.pdf Source: github.com/FuturesLab/GUIFuzzPlusPlus Go test some GUIs!
Paper deadlines for ASE’25 co-located workshops are approaching! This year, nine exciting workshops are co-located with ASE’25, covering diverse SE topics. Deadlines vary, but most are due Aug 26 ⏳. Check each workshop’s website for details! conf.researchr.org/track/ase-20... #ASE25 #Workshop #CFP
ASE 2025 - Workshops - ASE 2025
Welcome to the website of the 40th IEEE/ACM International Conference on Automated Software Engineering, ASE 2025. The ASE conference is the premier research forum for Automated Software Engineering. E...
conf.researchr.org
25 years of delta debugging! On this day in 2000, I presented “Simplifying Failure-Inducing Inputs” at ISSTA - now one of the most influential works in the 50-year history of Transactions on Software Engineering. Read all about its genesis and impact at doi.ieeecomputersociety.org/10.1109/TSE....
Released today: the second video in my Programming Language Pragmatics series, covering Compilation, Interpretation, and Environments! www.youtube.com/watch?v=mrmo... Going forward, I'll post a video 3 times a week. Please share the series with anyone who might benefit!
PLP 1.3-1.4: Compilation, interpretation, and environments
YouTube video by Jonathan Aldrich
youtube.com
Can we statistically estimate how likely an LLM-generated program is correct w/o knowing what is a correct program for that task? Sounds impossible-but it's actually really simple. In fact, our measure of "correctness" called incoherence can be estimated (PAC guarantees). arxiv.org/abs/2507.00057
Estimating Correctness Without Oracles in LLM-Based Code Generation
Generating code from natural language specifications is one of the most successful applications of Large Language Models (LLMs). Yet, they hallucinate: LLMs produce outputs that may be grammatically c...
arxiv.org
LibAFLGo adds directed fuzzing to #LibAFL Neat! (not related to Golang) github.com/vusec/libaflgo
GitHub - vusec/libaflgo: LibAFLGo: Evaluating and Advancing Directed Greybox Fuzzing
LibAFLGo: Evaluating and Advancing Directed Greybox Fuzzing - vusec/libaflgo
github.com
