pepe zamudio.Contact I study how to generate useful tests for complex software, especially when inputs have structure, constraints, or state. The papers below cover the methods and the security problems I’ve applied them to.
Grammars and semantic constraints for files, programs, and binary messages.
Generating complete message exchanges, not just isolated packets.
Test suites aimed at selected input features and the code they exercise.
Generating XML attack requests from web-service specifications.
Exercising edge cases in real systems, including a GNSS module.
Finding and reporting parser and file-format bugs with generated inputs.
Read a copy here, or follow the DOI to the publication record.
Author manuscript
Author preprint · CC BY 4.0 · License ↗ · Preprint source ↗
Published copy · CC BY 4.0 · License ↗
Early author draft · earlier title; see DOI for published paper
Published copy · CC BY 4.0 · License ↗
Published copy · CC BY 4.0 · License ↗
Author-supplied copy
Published copy · CC BY 4.0 · License ↗
The FSE tutorial and the Fandango reference guide.
Author copy · CC BY 4.0; subtitle differs from the publication record · License ↗
Manuscripts available on arXiv.
Selected people I have worked with, and the work we shared.
Andreas Zeller · Marius Smytzek · Alexander Liggesmeyer · Valentin Huber · Paul Kalbitzer · Alexi Turcotte · Addison Crump
Fandango, Compás, XML injection, and language-based testingMarcel Böhme · Gaetano Sapia
Feature-focused test generation with CompásDavid Benavides · David Romero Organvídez · José A. Galindo
Compás, WebSPL, XatkitSPL, and software product linesSebastian Lubos · Alexander Felfernig · Viet-Man Le · Thi Ngoc Trang Tran · Damian Garber
Feature-model analysis in recommender systemsEva Barrena · Sergio Bermudo · Alfredo G. Hernández-Díaz · Ana D. López-Sánchez
Optimization and heuristic algorithmsJordi Cabot
XatkitSPL · chatbot generation with software product linesStephan Neuhaus
Personalized fuzzing for a GNSS module