Research Impact Highlights
App Security: Recent work on developing Natural
Language Processing (NLP) techniques that analyze natural-language
descriptions for a mobile app to assess risk related to the permissions
declared for the app. See the USENIX
Security 2013 paper on Whyper. Various companies expressed strong
interest in the Whyper approach/tool, and Google has awarded a
Faculty Research Award
to support the follow-up work of Whyper.
Stay tuned for more updates!
Analytics: Recent and ongoing work on Software
Analytics with successful technology transfer in collaboration
Research Asia is being produced. See this IEEE
Software 2013 article and ASE
2013 Experience Report on the industry impact and experiences on
successful technology transfer. See the ICSE
2012 paper on StackMine, ACSAC
2012 paper on XIAO,
DSN 2014 paper, SRDS
2012 short paper and ICSE
2014 SEIP paper on log mining along with MALETS
2011 position paper/presentation
slides and ICSE
2012 SEIP Mini-Tutorial.
Testing: The contributed Fitnex
technique [DSN 2009] went into Pex
releases (produced by Microsoft Research) since Sept. 2008; substantial
collaborative work upon Pex has been published widely in top
software engineering venues. See this ASE
2014 Experience Report on the industry impact and experiences on
successful technology transfer.
- Pex has had high download
counts in industry and academia, e.g., more than 30,000 during a
20-month period of Feb. 2008-Oct. 2009.
Gamification: The contributed concept of Coding
Duel games went into Pex for Fun releases since
Summer 2010 and Code
Hunt releases since Spring 2014 (both produced by
Microsoft Research). See the
ICSE 2013 SEE paper
on Pex for Fun and this GAS 2013
paper on the advocated field of educational software
engineering; see the SBST
2014 paper on Code Hunt.
- Since its release in Summer 2010 till Oct. 2012, for only about two
years, Pex for Fun has already had over 1 million game-play
interactions made by players around the world.
- 2015 Microsoft Imagine Cup
includes a Code Hunt
Policies: The jointly-developed NIST
ACPT (Access Control Policy
Tool) is available as a
- As of Sept. 2012, ACPT had been downloaded more than 130 copies by
industrial and government organizations including: NSA, MITRE, DISA,
NOAA, SAIC, DNI, Pacific Northwest National Lab, Fermi Lab, BAE
system, Lockheed Martin, Raytheon, Boeing, SMI, VA government, John
Hopkins University, and organizations from foreign countries (the
number of downloads is still growing every week).
slides, publications, Google
Analytics for SE, Code
Engineering for Mobile/Internet Computing, and Educational
with recent themes as
Engineering Community: Chronology,
Map, Statistics , ...
Portal: Advice on
Writing Research Papers, Mapping
Out a Research Agenda, Research/advising
ASE Group: Group News Blog,
REU blog, K12
ASE Research overview, ...
Inspired by the
HTML style by Alex