Tevfik Bultan

ORCID

Publication Activity (10 Years)

Years Active: 1991-2024
Publications (10 Years): 51

Top Venues

Publications

Ismet Burak Kadron, Yannic Noller, Rohan Padhye, Tevfik Bultan, Corina S. Pasareanu, Koushik Sen
Fuzzing, Symbolic Execution, and Expert Guidance for Better Testing. IEEE Softw. 41 (1) (2024)
Seemanta Saha, Surendra Ghentiyala, Shihua Lu, Lucas Bang, Tevfik Bultan
Obtaining Information Leakage Bounds via Approximate Model Counting. Proc. ACM Program. Lang. 7 (PLDI) (2023)
William Eiers, Ganesh Sankaran, Tevfik Bultan
Quantitative Policy Repair for Access Control on the Cloud. ISSTA (2023)
Mara Downing, Tevfik Bultan
The Case for Scalable Quantitative Neural Network Analysis. SE4SafeML@SIGSOFT FSE (2023)
Seemanta Saha, Laboni Sarker, Md Shafiuzzaman, Chaofan Shou, Albert Li, Ganesh Sankaran, Tevfik Bultan
Rare Path Guided Fuzzing. ISSTA (2023)
William Eiers, Ganesh Sankaran, Albert Li, Emily O'Mahony, Benjamin Prince, Tevfik Bultan
Quacky: Quantitative Access Control Permissiveness Analyzer✱. ASE (2022)
Ismet Burak Kadron, Chaofan Shou, Emily O'Mahony, Yilmaz Vural, Tevfik Bultan
Targeted Black-Box Side-Channel Mitigation for IoT✱. IOT (2022)
Seemanta Saha, Mara Downing, Tegan Brennan, Tevfik Bultan
PREACH: A Heuristic for Probabilistic Reachability to Identify Hard to Reach Statements. ICSE (2022)
Seemanta Saha, Laboni Sarker, Md Shafiuzzaman, Chaofan Shou, Albert Li, Ganesh Sankaran, Tevfik Bultan
Rare-Seed Generation for Fuzzing. CoRR (2022)
Ismet Burak Kadron, Tevfik Bultan
TSA: a tool to detect and quantify network side-channels. ESEC/SIGSOFT FSE (2022)
William Eiers, Ganesh Sankaran, Albert Li, Emily O'Mahony, Benjamin Prince, Tevfik Bultan
Quantifying Permissiveness of Access Control Policies. ICSE (2022)
Chaofan Shou, Ismet Burak Kadron, Qi Su, Tevfik Bultan
CorbFuzz: Checking Browser Security Policies with Fuzzing. CoRR (2021)
Chaofan Shou, Ismet Burak Kadron, Qi Su, Tevfik Bultan
CorbFuzz: Checking Browser Security Policies with Fuzzing. ASE (2021)
Ismet Burak Kadron, Nicolás Rosner, Tevfik Bultan
Feedback-driven side-channel analysis for networked applications. ISSTA (2020)
Cyrille Artho, Quoc-Sang Phan, Peter Aldous, Alyas Almaawi, Lucas Bang, Lasse Berglund, Tevfik Bultan, Zhenbang Chen, Hayes Converse, Wei Dong, William Eiers, Milos Gligoric, Simon Goldsmith, Lars Grunske, Joshua Hooker, Ismet Burak Kadron, Timo Kehrer, Sarfraz Khurshid, Xuan-Bach Dinh Le, David Lo, Eric Mercer, Sasa Misailovic, Egor Namakonov, Hoang Lam Nguyen, Yannic Noller, Benjamin Ogles, Rohan Padhye, Pavel Parízek, Corina S. Pasareanu, Sheridan Jacob Powell, Seemanta Saha, Koushik Sen, Elena Sherman, Kyle Storey, Minxing Tang, Willem Visser, Ji Wang, Hengbiao Yu
The Java Pathfinder Workshop 2019. ACM SIGSOFT Softw. Eng. Notes 45 (2) (2020)
Tegan Brennan, Seemanta Saha, Tevfik Bultan
JVM fuzzing for JIT-induced side-channel detection. ICSE (2020)
Tegan Brennan, Nicolás Rosner, Tevfik Bultan
JIT Leaks: Inducing Timing Side Channels through Just-In-Time Compilation. IEEE Symposium on Security and Privacy (2020)
Seemanta Saha, William Eiers, Ismet Burak Kadron, Lucas Bang, Tevfik Bultan
Incremental Adaptive Attack Synthesis. CoRR (2019)
Seemanta Saha, Ismet Burak Kadron, William Eiers, Lucas Bang, Tevfik Bultan
Attack Synthesis for Strings using Meta-Heuristics. CoRR (2019)
Nicolás Rosner, Ismet Burak Kadron, Lucas Bang, Tevfik Bultan
Profit: Detecting and Quantifying Side Channels in Networked Applications. NDSS (2019)
Tevfik Bultan
Quantifying Information Leakage Using Model Counting Constraint Solvers. VSTTE (2019)
William Eiers, Seemanta Saha, Tegan Brennan, Tevfik Bultan
Subformula Caching for Model Counting and Quantitative Program Analysis. ASE (2019)
Seemanta Saha, William Eiers, Ismet Burak Kadron, Lucas Bang, Tevfik Bultan
Incremental Attack Synthesis. ACM SIGSOFT Softw. Eng. Notes 44 (4) (2019)
Ivan Bocic, Tevfik Bultan, Nicolás Rosner
Inductive verification of data model invariants in web applications using first-order logic. Autom. Softw. Eng. 26 (2) (2019)
Abdulbaki Aydin, William Eiers, Lucas Bang, Tegan Brennan, Miroslav Gavrilov, Tevfik Bultan, Fang Yu
Parameterized model counting for string and numeric constraints. ESEC/SIGSOFT FSE (2018)
Tegan Brennan, Seemanta Saha, Tevfik Bultan
Symbolic path cost analysis for side-channel detection. ICSE (Companion Volume) (2018)
Chun-Han Lin, Fang Yu, Jie-Hong Roland Jiang, Tevfik Bultan
Static detection of API call vulnerabilities in iOS executables. ICSE (Companion Volume) (2018)
Seemanta Saha, Ismet Burak Kadron, William Eiers, Lucas Bang, Tevfik Bultan
Attack Synthesis for Strings using Meta-Heuristics. ACM SIGSOFT Softw. Eng. Notes 43 (4) (2018)
Tegan Brennan, Seemanta Saha, Tevfik Bultan, Corina S. Pasareanu
Symbolic path cost analysis for side-channel detection. ISSTA (2018)
Tevfik Bultan
Side-Channel Analysis via Symbolic Execution and Model Counting. ACM SIGSOFT Softw. Eng. Notes 43 (4) (2018)
Nestan Tsiskaridze, Lucas Bang, Joseph McMahan, Tevfik Bultan, Timothy Sherwood
Information Leakage in Arbiter Protocols. ATVA (2018)
Lucas Bang, Nicolás Rosner, Tevfik Bultan
Online Synthesis of Adaptive Side-Channel Attacks Based On Noisy Observations. EuroS&P (2018)
Quoc-Sang Phan, Lucas Bang, Corina S. Pasareanu, Pasquale Malacaria, Tevfik Bultan
Synthesis of Adaptive Side-Channel Attacks. IACR Cryptol. ePrint Arch. 2017 (2017)
Tevfik Bultan, Andreas Zeller
Guest editorial: emerging areas in automated software engineering research. Autom. Softw. Eng. 24 (4) (2017)
Quoc-Sang Phan, Lucas Bang, Corina S. Pasareanu, Pasquale Malacaria, Tevfik Bultan
Synthesis of Adaptive Side-Channel Attacks. CSF (2017)
Tegan Brennan, Nestan Tsiskaridze, Nicolás Rosner, Abdulbaki Aydin, Tevfik Bultan
Constraint normalization and parameterized caching for quantitative program analysis. ESEC/SIGSOFT FSE (2017)
Ivan Bocic, Tevfik Bultan
Symbolic model extraction for web application verification. ICSE (2017)
Samik Basu, Tevfik Bultan
On deciding synchronizability for asynchronously communicating systems. Theor. Comput. Sci. 656 (2016)
Samik Basu, Tevfik Bultan
Automated Choreography Repair. FASE (2016)
Fang Yu, Ching-Yuan Shueh, Chun-Han Lin, Yu-Fang Chen, Bow-Yaw Wang, Tevfik Bultan
Optimal sanitization synthesis for web application vulnerability repair. ISSTA (2016)
Tevfik Bultan
Side Channel Analysis Using a Model Counting Constraint Solver and Symbolic Execution (Invited Talk). FSTTCS (2016)
Ivan Bocic, Tevfik Bultan
Finding access control bugs in web applications with CanCheck. ASE (2016)
Lucas Bang, Abdulbaki Aydin, Quoc-Sang Phan, Corina S. Pasareanu, Tevfik Bultan
String analysis for side channels with segmented oracles. SIGSOFT FSE (2016)
Jaideep Nijjar, Ivan Bocic, Tevfik Bultan
Data Model Property Inference, Verification, and Repair for Web Applications. ACM Trans. Softw. Eng. Methodol. 24 (4) (2015)
Ivan Bocic, Tevfik Bultan
Coexecutability for Efficient Verification of Data Model Updates. ICSE (1) (2015)
Tevfik Bultan
String Analysis for Vulnerability Detection and Repair. SPIN (2015)
Ivan Bocic, Tevfik Bultan
Data Model Bugs. NFM (2015)
Abdulbaki Aydin, Lucas Bang, Tevfik Bultan
Automata-Based Model Counting for String Constraints. CAV (1) (2015)
Lucas Bang, Abdulbaki Aydin, Tevfik Bultan
Automatically computing path complexity of programs. ESEC/SIGSOFT FSE (2015)
Jian Lu, David S. Rosenblum, Tevfik Bultan, Valérie Issarny, Schahram Dustdar, Margaret-Anne D. Storey, Dongmei Zhang
Roundtable: The Future of Software Engineering for Internet Computing. IEEE Softw. 32 (1) (2015)
Ivan Bocic, Tevfik Bultan
Efficient Data Model Verification with Many-Sorted Logic (T). ASE (2015)
Abdulbaki Aydin, Muath Alkhalaf, Tevfik Bultan
Automated Test Generation from Vulnerability Signatures. ICST (2014)
Chandra Krintz, Hiranya Jayathilaka, Stratos Dimopoulos, Alexander Pucher, Rich Wolski, Tevfik Bultan
Cloud Platform Support for API Governance. IC2E (2014)
Ivan Bocic, Tevfik Bultan
Inductive verification of data model invariants for web applications. ICSE (2014)
Muath Alkhalaf, Abdulbaki Aydin, Tevfik Bultan
Semantic differential repair for input validation and sanitization. ISSTA (2014)
Fang Yu, Muath Alkhalaf, Tevfik Bultan, Oscar H. Ibarra
Automata-based symbolic string analysis for vulnerability detection. Formal Methods Syst. Des. 44 (1) (2014)
Samik Basu, Tevfik Bultan
Automatic verification of interactions in asynchronous systems with unbounded buffers. ASE (2014)
Jaideep Nijjar, Tevfik Bultan
Data model property inference and repair. ISSTA (2013)
Meriem Ouederni, Gwen Salaün, Tevfik Bultan
Compatibility Checking for Asynchronously Communicating Software. FACS (2013)
Tevfik Bultan
Analyzing Interactions of Asynchronously Communicating Software Components - (Invited Paper). FMOODS/FORTE (2013)
Jaideep Nijjar, Ivan Bocic, Tevfik Bultan
An integrated data model verifier with property templates. FormaliSE@ICSE (2013)
Muath Alkhalaf, Shauvik Roy Choudhary, Mattia Fazzini, Tevfik Bultan, Alessandro Orso, Christopher Kruegel
ViewPoints: differential string analysis for discovering client- and server-side input validation inconsistencies. ISSTA (2012)
Jaideep Nijjar, Tevfik Bultan
Unbounded data model verification using SMT solvers. ASE (2012)
Samik Basu, Tevfik Bultan, Meriem Ouederni
Deciding choreography realizability. POPL (2012)
Samik Basu, Tevfik Bultan, Meriem Ouederni
Synchronizability for Verification of Asynchronously Communicating Systems. VMCAI (2012)
Gwen Salaün, Tevfik Bultan, Nima Roohi
Realizability of Choreographies Using Process Algebra Encodings. IEEE Trans. Serv. Comput. 5 (3) (2012)
Muath Alkhalaf, Tevfik Bultan, Jose L. Gallegos
Verifying client-side input validation functions using string analysis. ICSE (2012)
Fang Yu, Tevfik Bultan, Ben Hardekopf
String Abstractions for String Verification. SPIN (2011)
Jaideep Nijjar, Tevfik Bultan
Bounded verification of Ruby on Rails data models. ISSTA (2011)
Fang Yu, Tevfik Bultan, Oscar H. Ibarra
Relational String Verification Using Multi-Track Automata. Int. J. Found. Comput. Sci. 22 (8) (2011)
Samik Basu, Tevfik Bultan
Choreography conformance via synchronizability. WWW (2011)
Fang Yu, Muath Alkhalaf, Tevfik Bultan
Patching vulnerabilities with sanitization synthesis. ICSE (2011)
Tevfik Bultan
Software for everyone by everyone. FoSER (2010)
Tevfik Bultan, Fang Yu, Aysu Betin-Can
Modular verification of synchronization with reentrant locks. MEMOCODE (2010)
Sylvain Hallé, Tevfik Bultan
Realizability analysis for message-based interactions using shared-state projections. SIGSOFT FSE (2010)
Ben Rubinger, Tevfik Bultan
Contracting the Facebook API TAV-WEB (2010)
Sylvain Hallé, Tevfik Bultan, Graham Hughes, Muath Alkhalaf, Roger Villemaire
Runtime Verification of Web Service Interface Contracts. Computer 43 (3) (2010)
Fang Yu, Muath Alkhalaf, Tevfik Bultan
Stranger: An Automata-Based String Analysis Tool for PHP. TACAS (2010)
Fang Yu, Tevfik Bultan, Oscar H. Ibarra
Relational String Verification Using Multi-track Automata. CIAA (2010)
Sylvain Hallé, Taylor Ettema, Chris Bunch, Tevfik Bultan
Eliminating navigation errors in web applications via model checking and runtime enforcement of navigation state machines. ASE (2010)
Fang Yu, Muath Alkhalaf, Tevfik Bultan
Generating Vulnerability Signatures for String Manipulating Programs Using Automata-Based Forward and Backward Symbolic Analyses. ASE (2009)
Sylvain Hallé, Graham Hughes, Tevfik Bultan, Muath Alkhalaf
Generating Interface Grammars from WSDL for Automated Verification of Web Services. ICSOC/ServiceWave (2009)
Tuba Yavuz-Kahveci, Tevfik Bultan
Action Language verifier: an infinite-state model checker for reactive software specifications. Formal Methods Syst. Des. 35 (3) (2009)
Fang Yu, Tevfik Bultan, Oscar H. Ibarra
Symbolic String Verification: Combining String Analysis and Size Analysis. TACAS (2009)
Gwen Salaün, Tevfik Bultan
Realizability of Choreographies Using Process Algebra Encodings. IFM (2009)
Tevfik Bultan, Chris Ferguson, Xiang Fu
A Tool for Choreography Analysis Using Collaboration Diagrams. ICWS (2009)
Zachary Stengel, Tevfik Bultan
Analyzing singularity channel contracts. ISSTA (2009)
Tevfik Bultan
Service Choreography and Orchestration with Conversations. CONCUR (2008)
Graham Hughes, Tevfik Bultan, Muath Alkhalaf
Client and server verification for web services using interface grammars. TAV-WEB (2008)
Graham Hughes, Tevfik Bultan
Automated verification of access control policies using a SAT solver. Int. J. Softw. Tools Technol. Transf. 10 (6) (2008)
Tevfik Bultan, Tao Xie
Workshop on testing, analysis and verification of web software (TAV-WEB 2008). ISSTA (2008)
Graham Hughes, Tevfik Bultan
Interface Grammars for Modular Software Model Checking. IEEE Trans. Software Eng. 34 (5) (2008)
Fang Yu, Tevfik Bultan, Marco Cova, Oscar H. Ibarra
Symbolic String Verification: An Automata-Based Approach. SPIN (2008)
Tevfik Bultan, Xiang Fu
Choreography Modeling and Analysis with Collaboration Diagrams. IEEE Data Eng. Bull. 31 (3) (2008)
Tevfik Bultan, Constance L. Heitmeyer
Applying infinite state model checking and other analysis techniques to tabular requirements specifications of safety-critical systems. Des. Autom. Embed. Syst. 12 (1-2) (2008)
Fang Yu, Chao Wang, Aarti Gupta, Tevfik Bultan
Modular verification of web services using efficient symbolic encoding and summarization. SIGSOFT FSE (2008)
Tevfik Bultan, Xiang Fu
Specification of realizable service conversations using collaboration diagrams. Serv. Oriented Comput. Appl. 2 (1) (2008)
Tevfik Bultan, Xiang Fu
Specification of Realizable Service Conversations Using Collaboration Diagrams. SOCA (2007)
Elliot Barlas, Tevfik Bultan
Netstub: a framework for verification of distributed java applications. ASE (2007)
Fang Yu, Tevfik Bultan, Erik Peterson
Automated size analysis for OCL. ESEC/SIGSOFT FSE (2007)

Tevfik Bultan.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Tevfik Bultan