List of Papers

Recent Drafts

Journal Papers

Conference and Workshop Papers

Technical Reports

• Putting Information Theft Trojans on the Horns of a Dilemma: Redundancy for Confidentiality Policies.
  Jedidiah R. Crandall, John Brevik, Gary Wassermann, Daniela A. S. de Oliveira, Zhendong Su, S. Felix Wu, and Frederic T. Chong.
  Draft, December 2007.
• Behavior-Based Detection of Malicious Code via Static Analysis and Machine Learning.
  Ivan Balepin, Zhendong Su.
  Draft, June 2005.
• Type-based Inference of Size Relationships for XML Transformations.
  Zhendong Su and Gary Wassermann.
  Draft, October 2004.
  Full version, Technical Report UCD//CSE-2004-8, UC Davis, April 2004.
• The Complexity of Entailment Problems over Conditional Equality Constraints.
  Zhendong Su and Alexander Aiken.
  Submitted to Information and Computation, Elsevier, December 2003.
  An earlier version appeared in ESOP'01.

Journal Papers

[2007]

• Static Checking of Dynamically Generated Queries in Database Applications.
  Gary Wassermann, Carl Gould, Zhendong Su, and Premkumar Devanbu.
  Invited submission to ACM TOSEM, accepted November 2006.
  Extended version of the ICSE'04 paper.

[2005]

• The First-Order Theory of Subtyping Constraints.
  Zhendong Su, Alexander Aiken, Joachim Niehren, Tim Priesnitz, and Ralf Treinen.
  Accepted to ACM TOPLAS with minor revisions, December 2004.
  An earlier version appeared in POPL'02.
• A Class of Polynomially Solvable Range Constraints for Interval Analysis without Widenings.
  Zhendong Su and David Wagner.
  In Theoretical Computer Science, 345(1), pages 122-138 (2005), Elsevier (invited paper).

[2000]

• Detecting Races in Relay Ladder Logic Programs.
  Alexander Aiken, Manuel Faehndrich, and Zhendong Su.
  In Springer Journal STTT, 3(1), pages 93-105 (2000), Springer Verlag. © Springer Verlag

Conference and Workshop Papers (Acceptance rates, if known, shown in parentheses)

[2008]

• Dynamic Test Input Generation for Web Applications.
  Gary Wassermann, Dachuan Yu, Ajay Chander, Dinakar Dhurjati, Hiroshi Inamura, and Zhendong Su.
  To appear in Proceedings of ISSTA 2008, Seattle, WA, July 20-24, 2008. (26%)
• Scalable Detection of Semantic Clones.
  Mark Gabel, Lingxiao Jiang, and Zhendong Su.
  To appear in Proceedings of ICSE 2008, Leipzig, Germany, May 10-18, 2008. (15%)
• Symbolic Mining of Temporal Specifications.
  Mark Gabel and Zhendong Su.
  To appear in Proceedings of ICSE 2008, Leipzig, Germany, May 10-18, 2008. (15%)
• Static Detection of Cross-Site Scripting Vulnerabilities.
  Gary Wassermann and Zhendong Su.
  To appear in Proceedings of ICSE 2008, Leipzig, Germany, May 10-18, 2008. (15%)
• Bezoar: Automated Virtual Machine-based Full-System Recovery from Control-Flow Hijacking Attacks.
  Daniella A. S. de Oliveria, Jedidiah R. Crandall, Gary Wassermann, Shaozhi Ye, S. Felix Wu, Zhendong Su, and Frederic T. Chong.
  To appear in Proceedings of NOMS 2008, Salvador, Bahia, Brazil, April 7-11, 2008. (27%)

[2007]

• Feature Omission Vulnerabilities: Thwarting Signature Generation for Polymorphic Worms.
  Matthew Van Gundy, Hao Chen, Zhendong Su, and Giovanni Vigna.
  To appear in Proceedings of ACSAC 2007, Miami Beach, Florida, December 10-14, 2007. (22%)
• Context-Aware Statistical Debugging: From Bug Predictors to Faulty Control Flow Paths.
  Lingxiao Jiang and Zhendong Su.
  To appear in Proceedings of ASE 2007, Atlanta, Georgia, November 5-9, 2007. (12%)
• Context-Based Detection of Clone-Related Bugs.
  Lingxiao Jiang, Zhendong Su, and Edwin Chiu.
  To appear in Proceedings of ESEC/FSE 2007, Dubrovnik, Croatia, September 3-7, 2007. (17%)
• Sound and Precise Analysis of Web Applications for Injection Vulnerabilities.
  Gary Wassermann, Zhendong Su.
  In Proceedings of PLDI 2007, San Diego, CA, June 10-13, 2007. (25%)
• DECKARD: Scalable and Accurate Tree-based Detection of Code Clones.
  Lingxiao Jiang, Ghassan Misherghi, Zhendong Su, and Stephane Glondu.
  In Proceedings of ICSE 2007, Minneapolis, MN, May 20-26, 2007. (15%)

[2006]

• Validity Checking for Finite Automata over Linear Arithmetic Constraints.
  Gary Wassermann and Zhendong Su.
  In Proceedings of FSTTCS 2006, Kolkata, India, December 13-15, 2006. (22%)
• Back to the Future: A Framework for Automatic Malware Removal and System Repair.
  Francis Hsu, Hao Chen, Thomas Ristenpart, Jason Li, and Zhendong Su.
  In Proceedings of ACSAC 2006, Miami Beach, Florida, December 11-15, 2006. (30%)
• Temporal Search: Detecting Hidden Malware Timebombs with Virtual Machines.
  Jedidiah R. Crandall, Gary Wassermann, Daniela A. S. de Oliveira, Zhendong Su, S. Felix Wu, and Frederic T. Chong.
  In Proceedings of ASPLOS 2006, San Jose, California, Oct 21-25, 2006. (22%)
• ExecRecorder: VM-Based Full-System Replay for Attack Analysis and System Recovery.
  Daniela A. S. de Oliveira, Jedidiah R. Crandal, Gary Wassermann, S. Felix Wu, Zhendong Su, and Frederic T. Chong.
  In Proceedings of ASID 2006 (with ASPLOS 2006), San Jose, California, Oct 21, 2006.

• FIREMAN: A Toolkit for FIREwall Modeling and ANalysis.
  Lihua Yuan, Jianning Mai, Zhendong Su, Hao Chen, Chen-Nee Chuah, and Prasant Mohapatra.
  In Proceedings of IEEE S&P; 2006, Oakland, California, May 21-24, 2006. (9%)
• HDD: Hierarchical Delta Debugging.
  Ghassan Misherghi and Zhendong Su.
  In Proceedings of ICSE'06, Shanghai, China, May 20-28, 2006. (9%)
• Osprey: A Practical Type System for Validating Dimensional Unit Correctness of C Programs.
  Lingxiao Jiang and Zhendong Su.
  In Proceedings of ICSE'06, Shanghai, China, May 20-28, 2006. (9%)
• The Essence of Command Injection Attacks in Web Applications.
  Zhendong Su and Gary Wassermann.
  In Proceedings of POPL'06, Charleston, South Carolina, January 11-13, 2006. (19%)
  

[2005]

• On Deriving Unknown Vulnerabilities from Zero-Day Polymorphic and Metamorphic Worm Exploits.
  Jedidiah R. Crandall, Zhendong Su, S. Felix Wu, and Frederic T. Chong.
  In Proceedings of CCS'05, Alexandria, Virginia, November 2005. (15%)
• Complexity of Subtype Satisfiability over Posets.
  Joachim Niehren, Tim Priesnitz, and Zhendong Su.
  In Proceedings of ESOP'05, Edinburgh, Scotland, UK, April 2005. (24%)
  Longer version, July 2004.

[2004]

• An Analysis Framework for Security in Web Applications.
  Gary Wassermann and Zhendong Su.
  In Proceedings of the Workshop on Specification and Verification of Component-Based Systems (SAVCBS'04), affilated with FSE'04, Newport Beach, CA. (43%)
  

• Static Checking of Dynamically Generated Queries in Database Applications.
  Carl Gould, Zhendong Su, and Premkumar Devanbu.
  In Proceedings of ICSE'04, Edinburgh, Scotland, UK, May 2004. (13.5%)

  ACM SIGSOFT Distinguished Paper Award at ICSE'04.


Invited to ACM Transactions on Software Engineering and Methodology (TOSEM).
• JDBC Checker: A Static Analysis Tool for SQL/JDBC Applications.
  Carl Gould, Zhendong Su, and Premkumar Devanbu.
  Formal Research Demos at ICSE'04, Edinburgh, Scotland, UK, May 2004. (35%)
  Short abstract of this full paper.
• A Class of Polynomially Solvable Range Constraints for Interval Analysis without Widenings and Narrowings.
  Zhendong Su and David Wagner.
  In Proceedings of TACAS'04, Barcelona, Spain, March 2004. (25%) © Springer Verlag

  Invited to Theoretical Computer Science (TCS) for the best papers in TACAS'04.
  A revised version to appear in TCS.

---

[2002]

• The First-Order Theory of Subtyping Constraints.   [pdf]
  Zhendong Su, Alexander Aiken, Joachim Niehren, Tim Priesnitz, and Ralf Treinen.
  In Proceedings of POPL'02, Portland, USA, January 2002. © ACM

[2001]

• Entailment with Conditional Equality Constraints.     [pdf]
  Zhendong Su and Alexander Aiken.
  In Proceedings of ESOP'01, pages 170-189, Genova, Italy, April 2001. © Springer Verlag

[2000]

• Projection Merging: Reducing Redundancies in Inclusion Constraint Graphs.
  Zhendong Su, Manuel Faehndrich, and Alexander Aiken.
  In Proceedings of POPL'00, pages 81-95, Boston, USA, January 2000. © ACM

[1998]

• A Toolkit for Constructing Type- and Constraint-Based Program Analyses
  Alexander Aiken, Manuel Faehndrich, Jeffrey S. Foster, and Zhendong Su.
  In Proceedings of TIC'98, pages 78-96, Kyoto, Japan, March 1998.    © Springer Verlag
  Invited paper.
• Partial Online Cycle Elimination in Inclusion Constraint Graphs.
  Manuel Faehndrich, Jeffrey S. Foster, Zhendong Su, and Alexander Aiken.
  In Proceedings of PLDI'98, pages 85-96, Montreal, Canada, June 1998. © ACM
• Detecting Races in Relay Ladder Logic Programs.
  Alexander Aiken, Manuel Faehndrich, and Zhendong Su.
  In Proceedings of TACAS'98, pages 184-200, Lisbon, Portugal, March 1998. © Springer Verlag
  EAPLS Best Paper Award at ETAPS'98.
  Selected from all papers presented at the 1998 ETAPS joint conferences.
• Deciding Properties for Message Sequence Charts.
  Anca Muschool, Doron Peled, and Zhendong Su.
  In Proceedings of FoSSaCS'98, pages 226-242, Lisbon, Portugal, March 1998. © Springer Verlag

• Back to the Future: A Framework for Automatic Malware Removal and System Repair.
  Hao Chen, Francis Hsu, Jason Li, Thomas Ristenpart, and Zhendong Su.
  Technical Report UCD//CSE-2005-6, UC Davis, 2005.
• Algorithms for and the Complexity of Constraint Entailment.
  Zhendong Su.
  Ph.D. Thesis, University of California, Berkeley, December 2002.
• Entailment with Conditional Equality Constraints.
  Zhendong Su and Alexander Aiken.
  Computer Science Division Tech Report UCB//CSD-00-1113
  University of California at Berkeley, October 2000.
• Stutter Equivalence for Infinite State Systems.
  Zhendong Su.
  Unpublished manuscript, May 1998.

• Automatic Analysis of Relay Ladder Logic Programs.
  Zhendong Su.
  Computer Science Division Tech Report UCB//CSD-97-969
  University of California at Berkeley, September 1997.
  This report is also author's Master's thesis, supervised by Alex Aiken.
• A Comparative Analysis of Branch Prediction Schemes.
  Zhendong Su and Min Zhou.
  Unpublished manuscript (selected class project report), December 1995.

• Automating the Computation of Nested Abnormality Theories.
  Zhendong Su.
  Undergraduate Honor's Thesis, Department of Computer Sciences
  The University of Texas at Austin, June 1995.
  Supervised by Prof. Vladimir Lifschitz.