Title: "The Importance of Accounting for Real-World Labelling when Predicting Software Vulnerabilities"
Abstract:Previous work on vulnerability prediction assume that predictive models are trained with respect to perfect labelling information. In this talk we present our results revealing that the unrealistic labelling assumption can profoundly mislead the scientific conclusions drawn; suggesting highly effective and deployable prediction results vanish when we fully account for realistically available labelling in the experimental methodology.
Bio: Renaud Rwemalika is a PhD student at the University of Luxembourg currently working in the field of program analysis and software testing. He previously worked for 5 years as a software developer we he acquired a hands on knowledge of software engineering practices and challenges in complex production systems.
Title: “Assessing the Quality of the Steps to Reproduce in Bug Reports”
Abstract: A major problem with user-written bug reports, indicated by developers and documented by researchers, is the (lack of high) quality of the reported steps to reproduce the bugs. Low-quality steps to reproduce lead to excessive manual effort spent on bug triage and resolution. In this talk, I will introduce Euler, an approach that automatically identifies and assesses the quality of the steps to reproduce in a bug report, providing feedback to the reporters, which they can use to improve the bug report. The feedback provided by Euler was shown to be accurate and potentially useful, as its evaluation with external evaluators revealed that Euler correctly identified 98% of the existing steps to reproduce and 58% of the missing ones, while 73% of its quality annotations are correct.
Bio: Oscar Chaparro is an Assistant Professor in the Computer Science Department at the College of William and Mary. He received this Ph.D. in Software Engineering at the University of Texas at Dallas, advised by Dr. Andrian Marcus. His research interests lie in software maintenance and evolution. His current research aims at improving the quality of bug reports written by end users and assisting software developers during bug triage and resolution. He has authored several publications in top software engineering venues, such as ICSE, ESEC/FSE, and ICSME. He obtained the ACM SIGSOFT Distinguished Paper Award at ESEC/FSE’19 and the IEEE TCSE Distinguished Paper Award at ICSME’17. Oscar has served on the organizing and program committees of several conferences and workshops, including ICSME, MSR, ICPC, and the DySDoc3 and DocGen2 workshops in 2018 and 2020, respectively. Oscar received his B.Eng. and M.Eng. degrees from the National University of Colombia and has four years of industry experience in software research and development.