Alex Orso - Peer-reviewed Publications

Articles are available in Portable Document Format (PDF) or PostScript® format and some of them are compressed with gzip. Downloading any one of these documents indicates that you agree to abide by a copyright notice.

Note: I have not been particularly good at keeping this page updated lately. If you are interested in a paper, and there's no link for it on the page, feel free to send me a request by email.

  • "Leveraging Large Language Models to Improve REST API Testing"
    M. Kim, T. Stennett, D. Shah, S. Sinha, and A. Orso
    NIER track of the 46th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE-NIER 2024).

  • "Generating REST API Specifications through Static Analysis"
    R. Huang, M. Motwani, I. Martinez, and A. Orso
    Proceedings of the 46th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2024).

  • "A Framework For Inferring Properties of User-Defined Functions"
    X. Liu, J. Arulraj, and A. Orso
    Proceedings of the 46th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2024).

  • "Learning Defect Prediction from Unrealistic Data"
    K. Alrashedy, V. Hellendoorn and A. Orso
    Proceedings of the IEEE International Conference on Software Analysis, Evolution and Reengineering (SANER 2024).

  • "Adaptive REST API Testing with Reinforcement Learning
    M. Kim, S. Sinha, and A. Orso
    Proceedings of the 38th IEEE/ACM International Conference on Automated Software Engineering (ASE 2023).
  • "Enhancing REST API Testing with NLP Techniques"
    M. Kim, D. Corradini, S. Sinha, A. Orso, M. Pasqua, R. Tzoref-Brill, and M. Ceccato
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2023).

  • "Enhancing Mobile App Bug Reporting via Real-time Understanding of Reproduction Steps"
    M. Fazzini, K. Moran, C.B. Cardenas, T. Wendland, A. Orso, and D. Poshyvanyk
    IEEE Transactions on Software Engineering, Volume 49, Issue 3, March 2023.

  • "Studying and Understanding the Tradeoffs Between Generality and Reduction in Software Debloating
    Q. Xin, Q. Zhang, and A. Orso
    Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering (ASE 2022).
  • "Automated Test Generation for REST APIs: No Time to Rest Yet"
    M. Kim, Q. Xin, S. Sinha, and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2022).

  • "Automatic Detection of Performance Bugs in Database Systems using Equivalent Queries"
    X. Liu, Q. Zhou, J. Arulraj, and A. Orso
    Proceedings of the 44th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2022).

  • "Use of Test Doubles in Android Testing: An In-Depth Investigation"
    M. Fazzini, C. Choi, J.M. Copia, G. Lee, Y. Kakehi, A. Gorla, and A. Orso
    Proceedings of the 44th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2022).

  • "Automating Differential Testing with Overapproximate Symbolic Execution"
    R. Rutledge and A. Orso
    Proceedings of the 15th IEEE International Conference on Software Testing, Verification and Validation (ICST 2022).

  • "Improving Testing by Mimicking User Behavior"
    Q. Wang and A. Orso
    Proceedings of the 36th IEEE International Conference on Software Maintenance and Evolution (ICSME 2020).

  • "Seven Reasons Why: An In-Depth Study of the Limitations of Random Test Input Generation for Android"
    F. Behrang and A. Orso
    Proceedings of the 35th IEEE/ACM International Conference on Automated Software Engineering (ASE 2020).

  • "Subdomain-Based Generality-Aware Debloating"
    Q. Xin, M. Kim, Q. Zhang, and A. Orso
    Proceedings of the 35th IEEE/ACM International Conference on Automated Software Engineering (ASE 2020).

  • "Managing App Testing Device Clouds: Issues and Opportunities"
    M. Fazzini and A. Orso
    Proceedings of the 35th IEEE/ACM International Conference on Automated Software Engineering (ASE 2020) -- Late Breaking Results Track.

  • "Probabilistic Lipschitz Analysis of Neural Networks"
    R. Mangal, K. Sarangmath, A. Nori and A. Orso
    Proceedings of the 27th Static Analysis Symposium (SAS 2020).

  • "A Framework for Automated Test Mocking of Mobile Apps"
    M. Fazzini, A. Gorla, and A. Orso
    Proceedings of the 35th IEEE/ACM International Conference on Automated Software Engineering (ASE-NIER 2020).

  • "APIMigrator: An API-Usage Migration Tool for Android Apps"
    M. Fazzini, Q. Xin, and A. Orso
    Proceedings of the 7th IEEE/ACM International Conference on Mobile Software Engineering and Systems (MobileSoft-DEMO 2020).

  • "Program Debloating via Stochastic Optimization"
    Q. Xin, M. Kim, Q. Zhang, and A. Orso
    NIER track of the 42nd IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE-NIER 2020).

  • "AppTestMigrator: A Tool for Automated Test Migration for Android Apps"
    F. Behrang and A. Orso
    Demo track of the 42nd IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE-DEMO 2020).

  • "PG-KLEE: Trading Soundness for Coverage"
    R. Rutledge and A. Orso
    Demo track of the 42nd IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE-DEMO 2020).

  • "More Accurate Dynamic Slicing for Better Supporting Software Debugging"
    X. Li and A. Orso
    Proceedings of the 13th IEEE International Conference on Software Testing, Verification and Validation (ICST 2020).

  • "APIMigrator: An API-Usage Migration Tool for Android Apps"
    M. Fazzini, Q. Xin, and A. Orso
    Proceedings of the 7th IEEE/ACM International Conference on Mobile Software Engineering and Systems (MOBILESoft 2020 -- Tool Demos and Mobile Apps track)..

  • "Test Migration Between Mobile Apps with Similar Functionality"
    F. Behrang and A. Orso
    Proceedings of the 34th IEEE/ACM International Conference on Automated Software Engineering (ASE 2019).

  • "Automated API-Usage Update for Android Apps"
    M. Fazzini, Q. Xin, and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2019).

  • "Zero-Overhead Path Prediction with Progressive Symbolic Execution"
    R. Rutledge, S. Park, H. Khan, A. Orso, M. Prvulovic, and A. Zajic
    Proceedings of the 41st IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2019).

  • "Robustness of Neural Networks: A Probabilistic and Practical Perspective"
    R. Mangal, A. Nori, A. Orso
    NIER track of the 41st IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE-NIER 2019).

  • "Checking Probabilistic Properties of Neural Networks via Symbolic Methods and Sampling"
    R. Mangal, A. Nori, and A. Orso
    Proceedings of the First ICSE Workshop on Testing for Deep Learning and Deep Learning for Testing (DeepTest 2019).

  • "Identifying Features of Android Apps from Execution Traces"
    Q. Xin, F. Behrang, M. Fazzini, and A. Orso
    Proceedings of the 6th IEEE/ACM International Conference on Mobile Software Engineering and Systems (MOBILESoft 2019).

  • "[Poster] Mimicking User Behavior to Improve In-House Test Suites"
    Q. Wang and A. Orso
    Poster track of the 41st IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE-Poster 2019).

  • "Intent-Preserving Test Repair"
    X. Li, M. d’Amorim, and A. Orso
    Proceedings of the 12th IEEE International Conference on Software Testing, Verification and Validation (ICST 2019).

  • "Enabling Refinable Cross-Host Attack Investigation with Efficient Data Flow Tagging and Tracking"
    Y. Ji, S. Lee, M. Fazzini, J. Allen, E. Downing, T. Kim, A. Orso, and W. Lee
    Proceedings of the 27th USENIX Security Symposium (USENIX Security 2018).

  • "Test Migration for Efficient Large-Scale Assessment of Mobile App Coding Assignments"
    F. Behrang and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2018).

  • "Enlightened Debugging"
    X. Li, S. Zhu, M. d'Amorim, and A. Orso
    Proceedings of the 40th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2018).

  • "Automatically Translating Bug Reports into Test Cases for Mobile Apps"
    M. Fazzini, M. Prammer, M. d'Amorim, and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2018).

  • "GUIFetch: Supporting App Design and Development through GUI Search"
    [ACM-SIGSOFT Distinguished Paper Award]
    F. Behrang, S. Reiss, and A. Orso
    Proceedings of the 5th IEEE/ACM International Conference on Mobile Software Engineering and Systems (MOBILESoft 2018).

  • "[Poster] Automated Test Migration for Mobile Apps"
    F. Behrang and A. Orso
    Poster track of the 40th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE-Poster 2018).

  • "RAIN: Refinable Attack Investigation with On-demand Inter-Process Information Flow Tracking"
    Y. Ji, S. Lee, E. Downing, W. Wang, M. Fazzini, T. Kim, A. Orso, and W. Lee
    Proceedings of the ACM-SIGSAC Conference on Computer and Communications Security (CCS 2017).

  • "Automated Cross-Platform Inconsistency Detection for Mobile Apps"
    M. Fazzini and A. Orso
    Proceedings of the 32nd IEEE/ACM International Conference on Automated Software Engineering (ASE 2017).

  • "Barista: A Technique for Recording, Encoding, and Running Platform Independent Android Tests"
    M. Fazzini, E. Noronha de A. Freitas, S. Roy Choudhary, and A. Orso
    Proceedings of the 10th IEEE International Conference on Software Testing, Verification and Validation (ICST 2017).

  • "Behavioral Execution Comparison: Are Tests Representative of Field Behavior?"
    Q. Wang, Y. Brun, and A. Orso
    Proceedings of the 10th IEEE International Conference on Software Testing, Verification and Validation (ICST 2017).

  • "Iterative User-Driven Fault Localization"
    X. Li, M. d'Amorim, and A. Orso
    Proceedings of the 12th Haifa Verification Conference (HVC 2016).

  • "Improving Efficiency and Accuracy of Formula-based Debugging"
    W. Jin and A. Orso
    Proceedings of the 12th Haifa Verification Conference (HVC 2016).

  • "Zero-Overhead Profiling via EM Emanations"
    R. Callan, F. Behrang, M. Prvulovic, A. Zajic, and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2016).

  • "Don't Forget the Developers! (and Be Careful with Your Assumptions)"
    A. Orso
    Perspectives on Data Science for Software Engineering (Book Chapter), Morgan Kaufmann, T. Menzies, L. Williams, and T. Zimmermann (Eds.), Jul 2016, Invited.

  • "Software Analytics Under the Lamppost (or What Star Trek Teaches Us About the Importance of Asking the Right Questions)"
    N. Medvidovic and A. Orso
    Perspectives on Data Science for Software Engineering (Book Chapter), Morgan Kaufmann, T. Menzies, L. Williams, and T. Zimmermann (Eds.), Jul 2016, Invited.

  • "Automated Test Input Generation for Android: Are We There Yet?"
    S. Roy Choudhary, A. Gorla, and A. Orso
    Proceedings of the 29th IEEE/ACM International Conference on Automated Software Engineering (ASE 2015).

  • "Users Beware: Preference Inconsistencies Ahead"
    [ACM-SIGSOFT Distinguished Paper Award]
    F. Behrang, M. Cohen, and A. Orso
    Proceedings of the European Software Engineering Conference and ACM SIGSOFT Symposium on the Foundations of Software Engineering (ESEC/FSE 2015).

  • "Automated Support for Reproducing and Debugging Field Failures"
    W. Jin and A. Orso
    ACM Transactions on Software Engineering and Methodology (TOSEM), Volume 24, Issue 4, August 2015.

  • "Evaluating the Usefulness of IR-Based Fault Localization Techniques"
    Q. Wang, C. Parnin, and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2015).

  • "AutoCSP: Automatically Retrofitting CSP to Web Applications"
    M. Fazzini, P. Saxena, and A. Orso
    Proceedings of the 37th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2015).

  • "Mimic: Locating and Understanding Bugs by Analyzing Mimicked Executions"
    D. Zuddas, W. Jin, F. Pastore, L. Mariani, A. Orso
    Proceedings of the 29th IEEE/ACM International Conference on Automated Software Engineering (ASE 2014).
  • "Software Testing: A Research Travelogue (2000-2014)"
    A. Orso and G. Rothermel
    Proceedings of the 36th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2014) -- FOSE Track (invited).
  • "Cross-Platform Feature Matching for Web Applications"
    S. Roy Choudhary, M. Prasad, and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2014).

  • "X-PERT: A Web Application Testing Tool for Cross-Browser Inconsistency Detection"
    S. Roy Choudhary, M. Prasad, and A. Orso
    Tool Demonstration track of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA-ToolDemo 2014).

  • "MintHint: Automated Synthesis of Repair Hints"
    S. Kaleeswaran, V. Tulsian, A. Kanade, and A. Orso
    Proceedings of the 36th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2014).
  • "Reproducing Field Failures for Programs with Complex Grammar Based Input"
    F. Meshesha Kifetew, W. Jin, R. Tiella, A. Orso, and P. Tonella
    Proceedings of the 7th IEEE International Conference on Software Testing, Verification and Validation (ICST 2014).

  • "SBFR: A Search Based Approach for Reproducing Failures of Programs with Grammar Based Input" [short paper]
    F. Meshesha Kifetew, W. Jin, R. Tiella, A. Orso, and P. Tonella
    Proceedings of the 28th IEEE/ACM International Conference on Automated Software Engineering (ASE 2013).

  • "F3: Fault localization for Field Failures"
    W. Jin and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2013).

  • "Search-Based Propagation of Regression Faults in Automated Regression Testing"
    S. Shamshiri, G. Fraser, P. McMinn, and A. Orso
    Proceedings of the 3rd ICST International Workshop on Regression Testing (Regression 2013).

  • "TestEvol: A Tool for Analyzing Test-Suite Evolution"
    L. Sales Pinto, S. Sinha, and A. Orso
    Proceedings of the 35th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2013) -- Formal research demonstration.

  • "X-PERT: Accurate Identification of Cross-Browser Issues in Web Applications"
    S. Roy Choudhary, M. Prasad, and A. Orso
    Proceedings of the 35th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2013).

  • "Developing Analysis and Testing Plug-ins for Modern IDEs: An Experience Report"
    D. Zhao, S. Roy Choudhary, and A. Orso
    Software: Practice and Experience, Volume 43, Issue 4, April 2013.

  • "Understanding Myths and Realities of Test-suite Evolution"
    L. Sales Pinto, S. Sinha, and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on the Foundations of Software Engineering (FSE 2012).

  • "ViewPoints: Differential String Analysis for Discovering Client and Server-Side Input Validation Inconsistencies"
    M. Alkhalaf, T. Bultan, S. Roy Choudhary, M. Fazzini, A. Orso and C. Kruegel
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2012).

  • "Isolating Failure Causes through Test Case Generation"
    J. Rößler, G. Fraser, A. Zeller, and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2012).

  • "Efficient Regression Testing of Ontology-Driven Systems"
    M. Kim, J. Cobb, M.J. Harrold, T. Kurc, A. Orso, J. Saltz, A. Post, K. Malhotra and S. Navathe
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2012).

  • "BugRedux: Reproducing Field Failures for In-house Debugging"
    W. Jin and A. Orso
    Proceedings of the 34th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2012).

  • "CrossCheck: Combining Crawling and Differencing to Better Detect Cross-browser Incompatibilities in Web Applications"
    S. Roy Choudhary, M. Prasad, and A. Orso
    Proceedings of the 5th IEEE International Conference on Software Testing, Verification and Validation (ICST 2012).

  • "Informatics Support for Data Integrity Testing in Heterogeneous and Dynamic Database Environments"
    M. Kim, J. Cobb, T. Kurc, A. Orso, M.J. Harrold, A. Post, A. Sharma, and J. Saltz
    Proceedings of the 2012 AMIA Summit on Clinical Research Informatics (CRI 2012) -- Poster.

  • "Effective and Efficient Memory Protection Using Dynamic Tainting"
    I. Doudalis, J. Clause, G. Venkataramani, M. Prvulovic, and A. Orso
    IEEE Transactions on Computers, Volume 61, Issue 1, January 2012. .

  • "Improving Penetration Testing through Static and Dynamic Analysis"
    W. Halfond, S. Roy Choudhary, and A. Orso
    Software Testing, Verification & Reliability (STVR), Volume 21, Issue 3, September 2011.

  • "Are Automated Debugging Techniques Actually Helping Programmers?"
    C. Parnin and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2011).
    [2021 ISSTA Impact Paper Award]

  • "Optimizing Constraint Solving to Better Support Symbolic Execution"
    [Best Paper Award]
    I. Erete and A. Orso
    Proceedings of the 3rd ICST Workshop on Constraints in Software Testing, Verification, and Analysis (CSTVA 2011).

  • "When does my program fail?"
    J. Rößler, A. Orso, and A. Zeller
    Proceedings of the 3rd ICST Workshop on Constraints in Software Testing, Verification, and Analysis (CSTVA 2011).

  • "An Informatics Framework for Testing Data Integrity and Correctness of Federated Biomedical Databases"
    M. Kim, T. Kurc, A. Orso, J. Cobb, M.J. Harrold, A. Post, A. Sharma, and J. Saltz
    Proceedings of the 2011 AMIA Summit on Clinical Research Informatics (CRI 2011).

  • "Execution Hijacking: Improving Dynamic Analysis by Flying off Course"
    P. Tsankov, W. Jin, A. Orso, and S. Sinha
    Proceedings of the 4th IEEE International Conference on Software Testing, Verification and Validation (ICST 2011).

  • "Regression Testing in the Presence of Non-code Changes"
    A. Nanda, S. Mani, S. Sinha, M.J. Harrold, and A. Orso
    Proceedings of the 4th IEEE International Conference on Software Testing, Verification and Validation (ICST 2011).

  • "Camouflage: Automated Anonymization of Field Data"
    J. Clause and A. Orso
    Proceedings of the 33rd IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2011).

  • "Monitoring, Analysis, and Testing of Deployed Software"
    A. Orso
    Proceedings of the Foundations of Software Engineering (FSE) and NITR&D/SPD Working Conference on the Future of Software Engineering Research (FoSER 2010).

  • "Bridging Gaps between Developers and Testers in Globally-distributed Software Development"
    M. Grechanik, J. Jones, A. Orso, and A. van der Hoek
    Proceedings of the Foundations of Software Engineering (FSE) and NITR&D/SPD Working Conference on the Future of Software Engineering Research (FoSER 2010).

  • "BERT: A Tool for Behavioral Regression Testing"
    W. Jin, A. Orso, and T. Xie
    Proceedings of the ACM SIGSOFT Symposium on the Foundations of Software Engineering (FSE 2010) -- Formal research demonstration.

  • "A Cross-browser Web Application Testing Tool"
    S. Roy Choudhary, H. Versee, and A. Orso
    26th IEEE International Conference on Software Maintenance (ICSM 2010) -- Formal research demonstration.

  • "WebDiff: Automated Identification of Cross-browser Issues in Web Applications"
    S. Roy Choudhary, and A. Orso
    Proceedings of the 26th IEEE International Conference on Software Maintenance (ICSM 2010).

  • "Leakpoint: Pinpointing the Causes of Memory Leaks"
    J. Clause and A. Orso
    Proceedings of the 32nd IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2010).

  • "Automated Behavioral Regression Testing"
    W. Jin, A. Orso, and T. Xie
    Proceedings of the 3rd IEEE International Conference on Software Testing, Verification and Validation (ICST 2010).

  • "Precisely Detecting Runtime Change Interactions for Evolving Software"
    R. Santelices, A. Orso, and M.J. Harrold
    Proceedings of the 3rd IEEE International Conference on Software Testing, Verification and Validation (ICST 2010).

  • "PENUMBRA: Automatically Identifying Failure-Relevant Inputs Using Dynamic Tainting"
    J. Clause and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2009).

  • "Precise Interface Identification to Improve Testing and Analysis of Web Applications"
    [ACM-SIGSOFT Distinguished Paper Award]
    W. Halfond, S. Anand, and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2009).

  • "Automated Client-side Monitoring for Web Applications"
    S.R. Choudhary, and A. Orso
    Proceedings of the 1st International Workshop on Web Testing (WEBTEST 2009).

  • "Penetration Testing with Improved Input Vector Identification"
    [Best Presentation Award]
    W. Halfond, S.R. Choudhary, and A. Orso
    Proceedings of the 2nd IEEE International Conference on Software Testing, Verification and Validation (ICST 2009).

  • "MINTS: A General Framework and Tool for Supporting Test-suite Minimization"
    H.-Y. Hsu and A. Orso
    Proceedings of the 31st IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2009).

  • "Automated Identification of Interface Mismatches in Web Applications"
    [Best Student Presentation Award]
    W. Halfond and A. Orso
    Proceedings of the ACM SIGSOFT Symposium on the Foundations of Software Engineering (FSE 2008).

  • "Test-suite Augmentation for Evolving Software"
    [Best Paper Award and ACM-SIGSOFT Distinguished Paper Award]
    R. Santelices, P. Kumar Chittimalli, T. Apiwattanapong, A. Orso, and M. J. Harrold
    Proceedings of the 23rd IEEE/ACM International Conference on Automated Software Engineering (ASE 2008).

  • "Rapid: Identifying Bug Signatures to Support Debugging Activities" [short paper]
    H.-Y. Hsu, J. Jones, and A. Orso
    Proceedings of the 23rd IEEE/ACM International Conference on Automated Software Engineering (ASE 2008).

  • "BERT: BEhavioral Regression Testing"
    A. Orso and T. Xie
    Proceedings of the Sixth International ISSTA Workshop on Dynamic Analysis (WODA 2008).

  • "Pooled ANOVA"
    M. Last, G. Luta, A. Orso, A. Porter and S. Young
    Journal on Computational Statistics and Data Analysis Volume 52, Issue 12, August 2008.

  • "WASP: Protecting Web Applications Using Positive Tainting and Syntax-Aware Evaluation"
    W. Halfond, A. Orso, and P. Manolios
    IEEE Transactions on Software Engineering Volume 34, Issue 1, February 2008.

  • "Effective Memory Protection Using Dynamic Tainting"
    J. Clause, I. Doudalis, A. Orso, and M. Prvulovic
    Proceedings of the 22nd IEEE and ACM International Conference on Automated Software Engineering (ASE 2007).

  • "SCARPE: A Technique and Tool for Selective Record and Replay of Program Executions"
    S. Joshi and A. Orso
    Proceedings of the 23rd IEEE International Conference on Software Maintenance (ICSM 2007).

  • "Improving Test Case Generation for Web Applications Using Automated Interface Discovery"
    W. Halfond and A. Orso
    Proceedings of the European Software Engineering Conference and ACM SIGSOFT Symposium on the Foundations of Software Engineering (ESEC/FSE 2007).

  • "Dytan: A Generic Dynamic Taint Analysis Framework"
    J. Clause, W. Li, and A. Orso
    Proceedings of the ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2007).
    [2017 ISSTA Impact Paper Award]

  • "Using Component Metadata to Regression Test Component-based Software"
    A. Orso, H. Do, G. Rothermel, M. J. Harrold and D. Rosenblum
    Software Testing, Verification and Reliability, Volume 17, June 2007.

  • "A Technique for Enabling and Supporting Debugging of Field Failures"
    J. Clause and A. Orso
    Proceedings of the 29th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2007).

  • "Techniques for Classifying Executions of Deployed Software to Support Software Engineering Tasks"
    M. Haran, A. Karr, M. Last, A. Orso, A. Porter, A. Sanil, and S. Fouché.
    IEEE Transactions on Software Engineering, Volume 33, Issue 5, May 2007.

  • "Type-dependence Analysis and Program Transformation for Symbolic Execution"
    S. Anand, A. Orso, and M.J. Harrold
    Proceedings of the 13th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2007).

  • "JDiff: A Differencing Technique and Tool for Object-Oriented Programs"
    T. Apiwattanapong, A. Orso and M. J. Harrold
    Automated Software Engineering: An International Journal, Volume 14, Issue 1, March 2007.

  • "Using Positive Tainting and Syntax-Aware Evaluation to Protect Web Applications"
    W. Halfond, A. Orso, and P. Manolios.
    Proceedings of the 14th ACM SIGSOFT Symposium on the Foundations of Software Engineering (FSE 2006).

  • "Command-Form Coverage for Testing Database Applications"
    W. Halfond and A. Orso
    Proceedings of the IEEE and ACM International Conference on Automated Software Engineering (ASE 2006).

  • "MaTRIX: Maintenance-Oriented Testing Requirements Identifier and Examiner"
    T. Apiwattanapong, R. Santelices, P. Kumar Chittimalli, A. Orso, and M.J. Harrold
    Proceedings of the IEEE Workshop on "Testing: Academic & Industrial Conference, Practice and Research Techniques" (TAIC PART 2006)

  • "Preventing SQL Injection Attacks Using AMNESIA"
    W. Halfond and A. Orso
    28th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2006) -- Formal research demonstration

  • "Isolating relevant Component Interactions with JINSI"
    A. Orso, S. Joshi, M. Burger, and A. Zeller
    Proceedings of the Fourth International ICSE Workshop on Dynamic Analysis (WODA 2006).

  • "Recognizing Behavioral Patterns at Runtime using Finite Automata"
    L. Wendehals and A. Orso
    Proceedings of the Fourth International ICSE Workshop on Dynamic Analysis (WODA 2006).

  • "A Classification of SQL Injection Attacks and Prevention Techniques"
    W. Halfond, J. Viegas, and A. Orso
    Proceedings of the IEEE International Symposium on Secure Software Engineering (ISSSE 2006)

  • "InsECTJ: A Generic Instrumentation Framework for Collecting Dynamic Information within Eclipse"
    A. Seesing and A. Orso
    Proceedings of the eclipse Technology eXchange (eTX) Workshop at OOPSLA 2005.

  • "AMNESIA: Analysis and Monitoring for NEutralizing SQL-Injection Attacks"
    W. Halfond and A. Orso
    Proceedings of the IEEE and ACM International Conference on Automated Software Engineering (ASE 2005).
    [2020 ASE Most Influential Paper Award]

  • "MonDe: Safe Updating through Monitored Deployment of New Component Versions"
    J. Cook and A. Orso
    Proceedings of the ACM SIGPLAN-SIGSOFT Workshop on Program Analysis for Software Tools and Engineering (PASTE 2005).

  • "Applying Classification Techniques to Remotely-Collected Program Execution Data"
    M. Haran, A. Karr, A. Orso, A. Porter, and A. Sanil
    Proceedings of the European Software Engineering Conference and ACM SIGSOFT Symposium on the Foundations of Software Engineering (ESEC/FSE 2005).

  • "Selective Capture and Replay of Program Executions"
    A. Orso and B. Kennedy.
    Proceedings of the Third International ICSE Workshop on Dynamic Analysis (WODA 2005).

  • "Combining Static Analysis and Runtime Monitoring to Counter SQL-Injection Attacks"
    W. Halfond and A. Orso
    Proceedings of the Third International ICSE Workshop on Dynamic Analysis (WODA 2005).

  • "Efficient and Precise Dynamic Impact Analysis Using Execute-After Sequences"
    T. Apiwattanapong, A. Orso, and M.J. Harrold.
    Proceedings of the 27th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2005).

  • "Scaling Regression Testing to Large Software Systems"
    A. Orso, N. Shi, and M.J. Harrold.
    Proceedings of the 12th ACM SIGSOFT Symposium on the Foundations of Software Engineering (FSE 2004).

  • "A Differencing Algorithm for Object-oriented Programs"
    [Best Paper Award and ACM-SIGSOFT Distinguished Paper Award]
    T. Apiwattanapong, A. Orso, and M.J. Harrold
    Proceedings of the 19th IEEE International Conference on Automated Software Engineering (ASE 2004).

  • "A Generic Instrumentation Framework for Collecting Dynamic Information"
    A. Chawla and A. Orso
    Online Proceeding of the ISSTA Workshop on Empirical Research in Software Testing (WERST 2004). July 2004.

  • "Classifying Data Dependences in the Presence of Pointers for Program Comprehension, Testing, and Debugging"
    A. Orso, S. Sinha, and M.J. Harrold
    ACM Transactions on Software Engineering and Methodology (TOSEM), Volume 13, Issue 2, April 2004.

  • "Gammatella: Visualizing Program-Execution Data for Deployed Software"
    J. Jones, A. Orso, and M.J. Harrold
    Information Visualization, Volume 3, Issue 3, July 2004.

  • "An Empirical Comparison of Dynamic Impact Analysis Algorithms"
    A. Orso, T. Apiwattanapong, J. Law, G. Rothermel, and M.J. Harrold.
    Proceedings of the 26th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2004). May 2004.

  • "Automated Support for Development, Maintenance, and Testing in the Presence of Implicit Control Flow"
    S. Sinha, A. Orso, and M.J. Harrold
    Proceedings of the 26th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2004). May 2004.

  • Presentation: "Improving Dynamic Analysis through Partial Replay of Users' Executions"
    A. Orso and B. Kennedy
    Online Proceedings of the Dagstuhl Seminar on Understanding Program Dynamics. December 2003.

  • "Leveraging Field Data for Impact Analysis and Regression Testing"
    A. Orso, T. Apiwattanapong, and M.J. Harrold
    Proceedings of the European Software Engineering Conference and ACM SIGSOFT Symposium on the Foundations of Software Engineering (ESEC/FSE 2003). September 2003.

  • "Visualization of Program-Execution Data for Deployed Software"
    [ACM-SIGSOFT Distinguished Paper Award]
    A. Orso, J. Jones, and M.J. Harrold
    Proceedings of the ACM symposium on Software Visualization (SOFTVIS 2003). June 2003.

  • "Interclass Testing of Object Oriented Software"
    V. Martena, A. Orso, and M. Pezzè
    Proceedings of the IEEE International Conference on Engineering of Complex Computer Systems (ICECCS 2002). December 2002.

  • "Monitoring Deployed Software Using Software Tomography"
    J. Bowring, A. Orso, and M.J. Harrold
    Proceedings of the ACM SIGPLAN-SIGSOFT Workshop on Program Analysis for Software Tools and Engineering (PASTE 2002). November 2002.

  • "A Technique for Dynamic Updating of Java Software"
    A. Orso, A. Rao, and M.J. Harrold
    Proceedings of the IEEE International Conference on Software Maintenance (ICSM 2002). October 2002.

  • "Gamma System: Continuous Evolution of Software after Deployment"
    A. Orso, D. Liang, M.J. Harrold, and R. Lipton
    Proceedings of the International Symposium on Software Testing and Analysis (ISSTA 2002). July 2002.

  • "Using Component Metacontents to Support the Regression Testing of Component-Based Software"
    A. Orso, M.J. Harrold, D. Rosenblum, G. Rothermel, M.L. Soffa, and H. Do
    Proceedings of the IEEE International Conference on Software Maintenance (ICSM 2001). November 2001.

  • "Incremental Slicing Based on Data-Dependences Types"
    A. Orso, S. Sinha, and M.J. Harrold
    Proceedings of the IEEE International Conference on Software Maintenance (ICSM 2001). November 2001.

  • "Regression Test Selection for Java Software"
    M.J. Harrold, J. Jones, T. Li, D. Liang, A. Orso, M. Pennings, S. Sinha, S. Spoon, and A. Gujarathi
    Proceedings of the ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA 2001). October 2001.

  • "MASSA: Mobile Agents Security through Static/Dynamic Analysis"
    A. Orso, G. Vigna, and M.J. Harrold
    Proceedings of the ICSE Workshop on Software Engineering and Mobility. May 2001.

  • "Effects of Pointers on Data Dependences"
    A. Orso, S. Sinha, and M.J. Harrold
    Proceedings of the International Workshop on Program Comprehension (IWPC 2001). May 2001.

  • "Component Metadata for Software Engineering Tasks"
    A. Orso, M.J. Harrold, and D. Rosenblum
    Proceedings of EDO 2000, LNCS Vol. 1999, Springer-Verlag. November 2000.

  • "Automated Testing of Classes"
    U. buy, A. Orso and M. Pezzè
    Proceedings of International Symposium on Software Testing and Analysis (ISSTA 2000). August 2000.

  • "Integration Testing of Procedural Object-Oriented Languages with Polymorphism"
    A. Orso and M.Pezzè
    Proceedings of the International Conference on Testing Computer Software (TCS 1999). June 1999.

  • "A Framework for Testing Object-Oriented Components"
    U. Buy, C. Ghezzi, A. Orso, M.Pezzè, and M. Valsasna.
    Proceedings of the ICSE Workshop on Testing Distributed Component-Based Systems 1999. May 1999.

  • "Integration Testing of Object-Oriented Software"
    A. Orso,
    Ph.D. Dissertation, Dipartimento di Elettronica e Informazione, Politecnico di Milano, Italy. February 1999.

  • "Open Issues and Research Directions in Object-Oriented Testing"
    A. Orso and S. Silva
    Proceedings of the Fourth International Conference on Achieving Quality in Software (AQUIS 1998). January 1998.

  • "Introducing Formal Specification Methods in Industrial Practice"
    L. Baresi, A. Orso, and M. Pezzè
    Proceedings of the International Conference on Software Engineering (ICSE 1997). May 1997.

  • "Customizable Notations for Kernel Formalisms"
    L. Baresi, A. Orso, and M. Pezzè
    Proceedings of the International Conference on Engineering of Complex Computer Systems (ICECCS 1995). November 1995.

Posters and Formal Demos


  • Gammatella: Visualization of Program-Execution Data for Deployed Software,
    at the 26th IEEE and ACM SIGSOFT International Conference on Software Engineering (ICSE 2004). Edinburgh, Scotland, May 2004.
    (with J. Jones and M.J. Harrold)

  • Visualization of Program-Execution Data for Deployed Software,
    at the ACM symposium on Software Visualization (SOFTVIS 2003). San Diego, CA, June 2003.
    (with J. Jones and M.J. Harrold)

  • Software Tomography: Enabling Continuous Improvement in Software Development,
    at the ACM SIGSOFT International Symposium on the Foundations of Software Engineering (FSE 2002). Charleston, SC, November 2002.
    (with J. Bowring and M.J. Harrold)

  • Dynamic Update of Java Software,
    at the Yamacraw Industrial Advisory Board Workshop. Atlanta, GA, October 2002.
    (with M. Balakrishnan and M.J. Harrold)

  • DejaVOO: A Regression Testing Tool for Java Software,
    at the ACM Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA 2001). Tampa Bay, Florida, USA, October 2001.
    (with D. Liang and M.J. Harrold)


HTML style by Antonio Carzaniga Updated by Alex Orso on October 07, 2017 at 06:38:42.0000000000 EDT