Peer-Reviewed Publications (Acceptance rates, if known, shown in parentheses)

The documents referenced below are included by the contributing authors as a means to ensure timely dissemination of scholarly and technical work on a non-commercial basis. Copyright and all rights therein are maintained by the authors or by other copyright holders, notwithstanding that they have offered their works here electronically. It is understood that all persons copying this information will adhere to the terms and constraints invoked by each author's copyright.

[2013]

• Fast Algorithms for Dyck-CFL Reachability with Applications to Alias Analysis.
  Qirun Zhang, Michael R. Lyu, Hao Yuan, and Zhendong Su.
  In Proceedings of PLDI'13, Seattle, WA, June 16-22, 2013.
  
• Automatic Detection of Floating-Point Exceptions.
  Earl T. Barr, Thanh Vo, Vu Le, and Zhendong Su.
  In Proceedings of POPL'13, Rome, Italy, January 23-25, 2013. (18%)
  

[2012]

• Abstracting Runtime Heaps for Program Understanding.
  Mark Marron, Cesar Sanchez, Zhendong Su, and Manuel Fahndrich.
  IEEE Transactions on Software Engineering (TSE), to appear.
  
• Reusing Debugging Knowledge via Trace-based Bug Search.
  Zhongxian Gu, Earl Barr, Drew Schleck, and Zhendong Su.
  In Proceedings of SPLASH/OOPSLA, Tucson, AZ, October 2012. (25%)
• Liberating the Programmer with Prorogued Programming.
  Mehrdad Afshari, Earl Barr, and Zhendong Su.
  In Proceedings of SPLASH/Onward!, Tucson, AZ, October 2012. (26%)
• Detecting and Analyzing Insecure Component Usage.
  Taeho Kwon and Zhendong Su.
  In Proceedings of ACM SIGSOFT FSE 2012, Research Triangle Park, NC, November 2012. (17%)
• Testing Mined Specifications.
  Mark Gabel and Zhendong Su.
  In Proceedings of ACM SIGSOFT FSE 2012, Research Triangle Park, NC, November 2012. (17%)
• On the "Naturalness" of Software. [expanded]
  Abram Hindle, Earl T. Barr, Mark Gabel, Zhendong Su, and Premkumar Devanbu.
  In Proceedings of ICSE 2012, Zurich, Switzerland, June 2-9, 2012. (21%)
• Static Detection of Unsafe Component Loadings.
  Taeho Kwon and Zhendong Su.
  In Proceedings of CC 2012, Tallinn, Estonia, March 24-April 1, 2012. (25%)
• Automatic Detection of Unsafe Dynamic Component Loadings.
  Taeho Kwon and Zhendong Su.
  IEEE Transactions on Software Engineering (TSE), 38(2), pages 293-313, 2012 (invited paper).
  Extended version of an ISSTA'10 paper.

[2011]

• Modeling High-Level Behavior Patterns for Precise Similarity Analysis of Software.
  Taeho Kwon and Zhendong Su.
  In Proceedings of ICDM 2011, Vancouver, Canada, December 11-14, 2011. (18%)
• Synthesizing Method Sequences for High-Coverage Testing.
  Suresh Thummalapenta, Tao Xie, Nikolai Tillmann, Jonathan de Halleux, and Zhendong Su.
  In Proceedings of OOPSLA 2011 (SPLASH 2011), Portland, OR, October 22-27, 2011. (37%)
• Static Detection of Access Control Vulnerabilities in Web Applications.
  Fangqi Sun, Liang Xu, and Zhendong Su.
  In Proceedings of USENIX Security 2011, San Francisco, CA, August 8-12, 2011. (17%)
• BQL: Capturing and Reusing Debugging Knowledge.
  Zhongxian Gu, Earl T. Barr, and Zhendong Su.
  In Proceedings of ICSE 2010 Demonstrations Track, Honolulu, Hawaii, May 21-28, 2011. (37%)

[2010]

• Scalable and Systematic Detection of Buggy Inconsistencies in Source Code.
  Mark Gabel, Junfeng Yang, Yuan Yu, Moises Goldszmidt, and Zhendong Su.
  In Proceedings of OOPSLA 2010 (SPLASH 2010), Reno/Tahoe, NV, October 17-21, 2010. (27%)
• A Study of the Uniqueness of Source Code.
  Mark Gabel and Zhendong Su.
  In Proceedings of ACM SIGSOFT FSE 2010, Santa Fe, NM, November 7-11, 2010. (20%)
• Perturbing Numerical Calculations for Statistical Analysis of Floating-Point Program (In)Stability.
  Enyi Tang, Earl Barr, Xuandong Li, and Zhendong Su.
  In Proceedings of ISSTA 2010, Trento, Italy, July 12-16, 2010. (23%)
• Automatic Detection of Unsafe Component Loadings.
  Taeho Kwon and Zhendong Su.
  In Proceedings of ISSTA 2010, Trento, Italy, July 12-16, 2010. (23%)

  ACM SIGSOFT Distinguished Paper Award.

• Has the Bug Really Been Fixed?.
  Zhongxian Gu, Earl T. Barr, David J. Hamilton, and Zhendong Su.
  In Proceedings of ICSE 2010, Cape Town, South Africa, May 2-8, 2010. (13.7%)
• Online Inference and Enforcement of Temporal Properties.
  Mark Gabel and Zhendong Su.
  In Proceedings of ICSE 2010, Cape Town, South Africa, May 2-8, 2010. (13.7%)

  Nominee, ACM SIGSOFT Distinguished Paper Award.

[2009]

• Putting Information Theft Trojans on the Horns of a Dilemma: Redundancy for Information Theft Detection.
  Jedidiah R. Crandall, John Brevik, Shaozhi Ye, Gary Wassermann, Daniela A. S. de Oliveira, Zhendong Su, S. Felix Wu, and Frederic T. Chong.
  Accepted to the Special Issue on Security in Computing, Transactions on Computational Sciences Journal (Springer LNCS), 2009.
• Static Validation of C Preprocessor Macros.
  Andreas Saebjoernsen, Lingxiao Jiang, Daniel Quinlan, and Zhendong Su.
  To appear in Proceedings of ASE 2009, Auckland, New Zealand, November 16-20, 2009. (17%)
• Client-Side Detection of XSS Worms by Monitoring Payload Propagation.
  Fangqi Sun, Liang Xu, and Zhendong Su.
  To appear in Proceedings of ESORICS 2009, Saint Malo, France, September 21-23, 2009. (19%)
• Automatic Mining of Functionally Equivalent Code Fragments via Random Testing.
  Lingxiao Jiang and Zhendong Su.
  In Proceedings of ISSTA 2009, Chicago, IL, July 19-23, 2009. (27%)
• Detecting Code Clones in Binary Executables.
  Andreas Saebjoernsen, Jeremiah Willcok, Thomas Panas, Daniel Quinlan, and Zhendong Su.
  In Proceedings of ISSTA 2009, Chicago, IL, July 19-23, 2009. (27%)
• Structure and Dynamics of Research Collaboration in Computer Science.
  Christian Bird, Earl Barr, Andre Nash, Premkumar Devanbu, Vladimir Filkov, and Zhendong Su.
  In Proceedings of 2009 SIAM International Conference on Data Mining (SDM), Sparks, NV, April 30-May 2, 2009. (30%)

[2008]

• A General, Formal Framework for Evaluating Firewall Optimization Techniques.
  Ghassan Misherghi, Lihua Yuan, Zhendong Su, Chen-Nee Chuah, and Hao Chen.
  Accepted to IEEE Transactions on Network and Service Management (TNSM), 5(4), pages 227-238, 2008.
• Profile-Guided Program Simplification for Effective Testing and Analysis.
  Lingxiao Jiang and Zhendong Su.
  In Proceedings of ACM SIGSOFT FSE 2008, Atlanta, GA, November 9-14, 2008. (20%)
• Javert: Fully Automatic Mining of General Temporal Properties from Dynamic Traces.
  Mark Gabel and Zhendong Su.
  In Proceedings of ACM SIGSOFT FSE 2008, Atlanta, GA, November 9-14, 2008. (20%)
• Dynamic Test Input Generation for Web Applications.
  Gary Wassermann, Dachuan Yu, Ajay Chander, Dinakar Dhurjati, Hiroshi Inamura, and Zhendong Su.
  In Proceedings of ISSTA 2008, Seattle, WA, July 20-24, 2008. (26%)
• Scalable Detection of Semantic Clones.
  Mark Gabel, Lingxiao Jiang, and Zhendong Su.
  In Proceedings of ICSE 2008, Leipzig, Germany, May 10-18, 2008. (15%)
• Symbolic Mining of Temporal Specifications.
  Mark Gabel and Zhendong Su.
  In Proceedings of ICSE 2008, Leipzig, Germany, May 10-18, 2008. (15%)
• Static Detection of Cross-Site Scripting Vulnerabilities.
  Gary Wassermann and Zhendong Su.
  In Proceedings of ICSE 2008, Leipzig, Germany, May 10-18, 2008. (15%)
• Bezoar: Automated Virtual Machine-based Full-System Recovery from Control-Flow Hijacking Attacks.
  Daniella A. S. de Oliveria, Jedidiah R. Crandall, Gary Wassermann, Shaozhi Ye,
  S. Felix Wu, Zhendong Su, and Frederic T. Chong.
  In Proceedings of NOMS 2008, Salvador, Bahia, Brazil, April 7-11, 2008. (27%)

[2007]

• Feature Omission Vulnerabilities: Thwarting Signature Generation for Polymorphic Worms.
  Matthew Van Gundy, Hao Chen, Zhendong Su, and Giovanni Vigna.
  In Proceedings of ACSAC 2007, Miami Beach, Florida, December 10-14, 2007. (22%)
• Context-Aware Statistical Debugging: From Bug Predictors to Faulty Control Flow Paths.
  Lingxiao Jiang and Zhendong Su.
  In Proceedings of ASE 2007, Atlanta, Georgia, November 5-9, 2007. (12%)
• Context-Based Detection of Clone-Related Bugs.
  Lingxiao Jiang, Zhendong Su, and Edwin Chiu.
  In Proceedings of ESEC/FSE 2007, Dubrovnik, Croatia, September 3-7, 2007. (17%)
• Sound and Precise Analysis of Web Applications for Injection Vulnerabilities.
  Gary Wassermann, Zhendong Su.
  In Proceedings of PLDI 2007, San Diego, CA, June 10-13, 2007. (25%)
• DECKARD: Scalable and Accurate Tree-based Detection of Code Clones.
  Lingxiao Jiang, Ghassan Misherghi, Zhendong Su, and Stephane Glondu.
  In Proceedings of ICSE 2007, Minneapolis, MN, May 20-26, 2007. (15%)

  Nominee, ACM SIGSOFT Distinguished Paper Award.

• Static Checking of Dynamically Generated Queries in Database Applications.
  Gary Wassermann, Carl Gould, Zhendong Su, and Premkumar Devanbu.
  ACM Transactions on Software Engineering and Methodology (TOSEM), 16(4), 2007 (invited paper).
  Extended version of an ICSE'04 paper.

[2006]

• Validity Checking for Finite Automata over Linear Arithmetic Constraints.
  Gary Wassermann and Zhendong Su.
  In Proceedings of FSTTCS 2006, Kolkata, India, December 13-15, 2006. (22%)
• Back to the Future: A Framework for Automatic Malware Removal and System Repair.
  Francis Hsu, Hao Chen, Thomas Ristenpart, Jason Li, and Zhendong Su.
  In Proceedings of ACSAC 2006, Miami Beach, Florida, December 11-15, 2006. (30%)
• Temporal Search: Detecting Hidden Malware Timebombs with Virtual Machines.
  Jedidiah R. Crandall, Gary Wassermann, Daniela A. S. de Oliveira, Zhendong Su, S. Felix Wu, and Frederic T. Chong.
  In Proceedings of ASPLOS 2006, San Jose, California, Oct 21-25, 2006. (22%)
• ExecRecorder: VM-Based Full-System Replay for Attack Analysis and System Recovery.
  Daniela A. S. de Oliveira, Jedidiah R. Crandal, Gary Wassermann, S. Felix Wu, Zhendong Su, and Frederic T. Chong.
  In Proceedings of ASID 2006 (with ASPLOS 2006), San Jose, California, Oct 21, 2006.

• FIREMAN: A Toolkit for FIREwall Modeling and ANalysis.
  Lihua Yuan, Jianning Mai, Zhendong Su, Hao Chen, Chen-Nee Chuah, and Prasant Mohapatra.
  In Proceedings of IEEE S&P 2006, Oakland, California, May 21-24, 2006. (9%)
• HDD: Hierarchical Delta Debugging.
  Ghassan Misherghi and Zhendong Su.
  In Proceedings of ICSE'06, Shanghai, China, May 20-28, 2006. (9%)
• Osprey: A Practical Type System for Validating Dimensional Unit Correctness of C Programs.
  Lingxiao Jiang and Zhendong Su.
  In Proceedings of ICSE'06, Shanghai, China, May 20-28, 2006. (9%)
• The Essence of Command Injection Attacks in Web Applications.
  Zhendong Su and Gary Wassermann.
  In Proceedings of POPL'06, Charleston, South Carolina, January 11-13, 2006. (19%)
  

[2005]

• A Class of Polynomially Solvable Range Constraints for Interval Analysis without Widenings.
  Zhendong Su and David Wagner.
  In Theoretical Computer Science, 345(1), pages 122-138 (2005), Elsevier (invited paper).

• On Deriving Unknown Vulnerabilities from Zero-Day Polymorphic and Metamorphic Worm Exploits.
  Jedidiah R. Crandall, Zhendong Su, S. Felix Wu, and Frederic T. Chong.
  In Proceedings of CCS'05, Alexandria, Virginia, November 2005. (15%)
• Complexity of Subtype Satisfiability over Posets.
  Joachim Niehren, Tim Priesnitz, and Zhendong Su.
  In Proceedings of ESOP'05, Edinburgh, Scotland, UK, April 2005. (24%)
  Longer version, July 2004.

[2004]

• An Analysis Framework for Security in Web Applications.
  Gary Wassermann and Zhendong Su.
  In Proceedings of the Workshop on Specification and Verification of Component-Based Systems (SAVCBS'04), affilated with FSE'04, Newport Beach, CA. (43%)
  

• Static Checking of Dynamically Generated Queries in Database Applications.
  Carl Gould, Zhendong Su, and Premkumar Devanbu.
  In Proceedings of ICSE'04, Edinburgh, Scotland, UK, May 2004. (13.5%)

  ACM SIGSOFT Distinguished Paper Award at ICSE'04.

Invited to ACM Transactions on Software Engineering and Methodology (TOSEM).

• JDBC Checker: A Static Analysis Tool for SQL/JDBC Applications.
  Carl Gould, Zhendong Su, and Premkumar Devanbu.
  Formal Research Demos at ICSE'04, Edinburgh, Scotland, UK, May 2004. (35%)
  Short abstract of this full paper.
• A Class of Polynomially Solvable Range Constraints for Interval Analysis without Widenings and Narrowings.
  Zhendong Su and David Wagner.
  In Proceedings of TACAS'04, Barcelona, Spain, March 2004. (25%) © Springer Verlag

  Invited to Theoretical Computer Science (TCS) for the best papers in TACAS'04.
  

[2002]

• The First-Order Theory of Subtyping Constraints.
  Zhendong Su, Alexander Aiken, Joachim Niehren, Tim Priesnitz, and Ralf Treinen.
  In Proceedings of POPL'02, Portland, USA, January 2002. © ACM

[2001]

• Entailment with Conditional Equality Constraints.
  Zhendong Su and Alexander Aiken.
  In Proceedings of ESOP'01, pages 170-189, Genova, Italy, April 2001. © Springer Verlag

[2000]

• Detecting Races in Relay Ladder Logic Programs.
  Alexander Aiken, Manuel Faehndrich, and Zhendong Su.
  In Springer Journal STTT, 3(1), pages 93-105 (2000), Springer Verlag (invited paper). © Springer Verlag
• Projection Merging: Reducing Redundancies in Inclusion Constraint Graphs.
  Zhendong Su, Manuel Faehndrich, and Alexander Aiken.
  In Proceedings of POPL'00, pages 81-95, Boston, USA, January 2000. © ACM

[1998]

• A Toolkit for Constructing Type- and Constraint-Based Program Analyses
  Alexander Aiken, Manuel Faehndrich, Jeffrey S. Foster, and Zhendong Su.
  In Proceedings of TIC'98, pages 78-96, Kyoto, Japan, March 1998.    © Springer Verlag
  Invited paper.
• Partial Online Cycle Elimination in Inclusion Constraint Graphs.
  Manuel Faehndrich, Jeffrey S. Foster, Zhendong Su, and Alexander Aiken.
  In Proceedings of PLDI'98, pages 85-96, Montreal, Canada, June 1998. © ACM
• Detecting Races in Relay Ladder Logic Programs.
  Alexander Aiken, Manuel Faehndrich, and Zhendong Su.
  In Proceedings of TACAS'98, pages 184-200, Lisbon, Portugal, March 1998. © Springer Verlag

  EAPLS Best Paper Award at ETAPS'98.
  Selected from all papers presented at the 1998 ETAPS joint conferences.

• Deciding Properties for Message Sequence Charts.
  Anca Muschool, Doron Peled, and Zhendong Su.
  In Proceedings of FoSSaCS'98, pages 226-242, Lisbon, Portugal, March 1998. © Springer Verlag

• Back to the Future: A Framework for Automatic Malware Removal and System Repair.
  Hao Chen, Francis Hsu, Jason Li, Thomas Ristenpart, and Zhendong Su.
  Technical Report UCD//CSE-2005-6, UC Davis, 2005.
• Algorithms for and the Complexity of Constraint Entailment.
  Zhendong Su.
  Ph.D. Dissertation, University of California, Berkeley, December 2002.
• Entailment with Conditional Equality Constraints.
  Zhendong Su and Alexander Aiken.
  Computer Science Division Tech Report UCB//CSD-00-1113
  University of California at Berkeley, October 2000.
• Stutter Equivalence for Infinite State Systems.
  Zhendong Su.
  Unpublished manuscript, May 1998.

• Automatic Analysis of Relay Ladder Logic Programs.
  Zhendong Su.
  Computer Science Division Tech Report UCB//CSD-97-969
  University of California at Berkeley, September 1997.
  This report is also author's Master's thesis, supervised by Alex Aiken.
• A Comparative Analysis of Branch Prediction Schemes.
  Zhendong Su and Min Zhou.
  Unpublished manuscript (selected class project report), December 1995.

• Automating the Computation of Nested Abnormality Theories.
  Zhendong Su.
  Undergraduate Honor's Thesis, Department of Computer Sciences
  The University of Texas at Austin, June 1995.
  Supervised by Prof. Vladimir Lifschitz.