Category: research

  • FANDANGO: Evolving Language-Based Testing — ISSTA 2025

    Our paper “FANDANGO: Evolving Language-Based Testing” was published in the Proceedings of the ACM on Software Engineering at ISSTA 2025, co-authored with Marius Smytzek and Andreas Zeller. This is the main research paper behind the Fandango fuzzer. Language-based fuzzers work by combining a formal grammar — which defines what valid inputs look like structurally —…

  • Personalized Fuzzing: Testing a GNSS Module with Fandango — ISSTA 2025

    Our paper “Personalized Fuzzing: A Case Study with the FANDANGO Fuzzer on a GNSS Module” was published at the 34th ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2025), co-authored with Stephan Neuhaus and Andreas Zeller. GNSS modules — the hardware components responsible for satellite-based positioning in devices like phones, drones, and vehicles…

  • XAVIER: Grammar-Based Testing for XML Injection Attacks — ISSTA 2025

    Our paper “XAVIER: Grammar-Based Testing for XML Injection Attacks” was published at the 34th ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2025), co-authored with Paul Kalbitzer and Andreas Zeller. Web services handle some of the most sensitive operations on the internet — banking, e-commerce, authentication — and they are also prime targets…

  • Finding the Minimum k-Weighted Dominating Set — MATCOM 2024

    Our paper “Finding the Minimum k-Weighted Dominating Sets Using Heuristic Algorithms” was published in Mathematics and Computers in Simulation (MATCOM), a journal by Elsevier focused on mathematical modeling and computational methods. The problem we tackle is a generalization of the classical dominating set problem in graph theory. In a standard dominating set, you want to…

  • Shaping Test Inputs in Grammar-Based Fuzzing — ISSTA 2024

    My paper “Shaping Test Inputs in Grammar-Based Fuzzing” was published at the 33rd ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA 2024), one of the top venues for software testing research. The paper starts from a problem that anyone who has used grammar-based fuzzing will recognize: existing fuzzers are biased. When you define…

  • Feature Model Analysis in Constraint-Based Recommender Systems — SPLC 2023

    I’m happy to share that our paper “Analysis Operations on the Run: Feature Model Analysis in Constraint-Based Recommender Systems” was accepted at the 27th ACM International Systems and Software Product Line Conference (SPLC 2023), one of the leading venues for research on software product lines and variability modeling. The motivation behind this work came from…