Research

research

Publications

  • conference Julian Thome, Hua Yan, Lucas Charles, Craig Smith, Jason Leasure, Vulnerability Tracking using Normalized Scope+Offset, International Conference on Automated Software Engineering (ASE) - Industry Showcase Track, Oct 2026

  • conference James Johnson, Julian Thome, Lucas Charles, Hua Yan, Jason Leasure, A scalable, effective and simple Vulnerability Tracking approach for heterogeneous SAST setups based on Scope+Offset, International Conference on Software Engineering (ICSE) - Software Engineering in Practice (SEIP) Track, Apr 2025 DOI

  • conference Julian Thome, James Johnson, Isaac Dawson, Dinesh Bolkensteyn, Michael Henriksen, Mark Art, SourceWarp: A scalable, SCM-driven testing and benchmarking approach to support data-driven and agile decision making for CI/CD tools and DevOps platforms, International Conference on Automation of Software Test (AST), May 2023 DOI

  • journal Julian Thome, Lwin Khin Shar, Domenico Bianculli, Lionel C. Briand, An integrated approach for effective injection vulnerability analysis of web applications through security slicing and hybrid constraint solving, Transactions on Software Engineering (TSE), Jun 2018 DOI

  • tool demo Julian Thome, Lwin Khin Shar, Domenico Bianculli, Lionel C. Briand, JoanAudit: a tool for auditing common injection vulnerabilities, Meeting on Foundations of Software Engineering (FSE), Sep 2017 DOI

  • conference Julian Thome, Lwin Khin Shar, Domenico Bianculli, Lionel C. Briand, Search-driven string constraint solving for vulnerability detection, International Conference on Software Engineering (ICSE), May 2017 DOI

  • journal Julian Thome, Lwin Khin Shar, Domenico Bianculli, Lionel C. Briand, Security slicing for auditing common injection vulnerabilities, Journal of Systems and Software (JSS), Mar 2017 DOI

  • conference Julian Thome, Lwin Khin Shar, Lionel C. Briand, Security slicing for auditing XML, XPath, and SQL injection vulnerabilities, International Symposium on Software Reliability Engineering (ISSRE), Nov 2015 DOI

  • doctoral symposium Julian Thome, A scalable and accurate hybrid vulnerability analysis framework, Doctoral Symposium @ International Symposium on Software Reliability Engineering (ISSRE), Nov 2015

  • workshop Julian Thome, Alessandra Gorla, Andreas Zeller, Search-based security testing of web applications, International Workshop on Search-Based Software Testing (SBST), Jun 2014 DOI

Presentations

Services