We are conducting research on automating software testing using (static and dynamic) program analysis with the goal of building testing tools that are automatic, scalable and check many properties. Our work combines program analysis, testing, model checking and theorem proving.

Contact: Patrice Godefroid

• SAGE (internal; see): hunting for million-dollar security bugs in Microsoft products.
• Pex: unit testing of .NET managed programs.
• Yogi: testing and static analysis of Windows device drivers.
• Vigilante: automatic generation of worm filters.

• Finding Errors in .NET with Feedback-Directed Random Testing, C. Pacheco, S. K. Lahiri, T. Ball. MSR-TR-2008-29. To appear, ISSTA 2008.
• Grammar-based Whitebox Fuzzing, P. Godefroid, A. Kiezun, M. Y. Levin. To appear, PLDI 2008.
• Demand-Driven Compositional Symbolic Execution, S. Anand, P. Godefroid, N. Tillmann, TACAS 2008
• Automated Whitebox Fuzz Testing, P. Godefroid, M. Y. Levin, D. Molnar, NDSS 2008
• Compositional Dynamic Test Generation, P. Godefroid. POPL 2007
• Feedback-directed Random Test Generation, C. Pacheco, S. K. Lahiri, M. Ernst, T. Ball. ICSE 2007