Publications

COPYRIGHT: The following materials are copyrighted by the corresponding publishers (e.g., ACM, IEEE, Springer Verlag). You can download them only if you accept and obey the terms and restrictions defined by the respective publishers. The online version may be older than the printed version available at the respective publisher’s website. 

Word Cloud:  The following word cloud is created using my publication names in tagxedo.



Book Chapter
    • Xusheng Xiao, Suresh Thummalapenta, Tao Xie. Advances on Improving Automation in Developer TestingIn Advances in Computers Series, Volume 85, Burlington: Academic Press, 2012, pages 165-212. [PDF]
        Journal
    • Xusheng Xiao, Nikolai Tillmann, Manuel Fahndrich, Jonathan de Halleux, Michal Moskal, and Tao Xie. User-Aware Privacy Control via Extended Static-Information-Flow AnalysisAutomated Software Engineering Journal (ASEJ), 2014. [PDF]. A previous version appeared in Proceedings of ASE 2012.
    • Tao Xie, Lu Zhang, Xusheng Xiao, Yingfei Xiong, and Dan Hao. Cooperative Software Testing and Analysis: Advances and ChallengesJournal of Computer Science and Technology (JCST)2014. [PDF]
        Conference
  • Jianjun Huang, Zhichun Li, Xusheng Xiao, Zhenyu Wu, Kangjie Lu, Xiangyu Zhang, Guofei Jiang. SUPOR: Precise and Scalable Sensitive User Input Detection for Android AppsTo appear in the 24th USENIX Security Symposium (USENIX Security 2015), Washington, D.C., August 2015. [PDF(Acceptance Rate: 15.7%, 67 out of 426).
  • Wei Yang, Xusheng Xiao, Benjamin Andow, Sihan Li, Tao Xie, and William Enck. AppContext: Differentiating Malicious and Benign Mobile App Behaviors Under ContextIn Proceedings of the 37th International Conference on Software Engineering (ICSE 2015), Florence, Italy, May 2015. [PDF] (Acceptance Rate: 18.5%, 84 out of 452).
  • John Slankas, Xusheng Xiao, Laurie Williams, and Tao Xie. Relation Extraction for Inferring Access Control Rules from Natural Language Artifacts. In Proceedings of the 2014 Annual Computer Security Applications Conference (ACSAC 2014), pages 366-375, New Orleans, Louisiana, USA, December 2014. [PDF]
  • Xusheng XiaoGogul Balakrishnan, Franjo Ivancic, Naoto Maeda, Aarti Gupta and Deepak Chhetri ARC++: : Effective Typestate and Lifetime Dependency Analysis In Proceedings of the 2014 International Symposium on Software Testing and Analysis (ISSTA 2014), pages 116-126, Bay Area, California, July 2014. [PDF] (Acceptance Rate: 28.1%, 36 out of 128).
    • Xusheng Xiao, Shi Han, Tao Xie, and Dongmei Zhang.  Context-Sensitive Delta Inference for Identifying Workload-Dependent Performance Bottlenecks In Proceedings of the 2013 International Symposium on Software Testing and Analysis (ISSTA 2013)pages 90-100, Lugano Switzerland, July 2013. [PDF]  (Acceptance Rate: 32 / 124 =  25.8% 
    • Xusheng Xiao, Sihan Li, Tao Xie, and Nikolai Tillmann. Characteristic Studies of Loop Problems for Structural Test Generation via Symbolic ExecutionIn Proceedings of the 28th IEEE/ACM International Conference on Automated Software Engineering (ASE 2013), pages 246-256, Palo Alto, California, November 2013. [PDF] (Acceptance Rate: 17.0%, 43 / 254 = 17.0%).
    • Rahul Pandita, Xusheng Xiao, Wei Yang, William Enck, and Tao Xie.  WHYPER: Towards Automating Risk Assessment of Mobile Applications In Proceedings of the 22nd USENIX Security Symposium (USENIX Security 2013)pages 527-542,Washington DC, August 2013.  [PDF(Acceptance Rate: 45 / 277 = 16.2%)
    • Xusheng Xiao, Amit Paradkar, Suresh Thummalapenta and Tao XieAutomated Extraction of Security Policies from Natural-Language Software Documents. In Proceedings of the 20th ACM SIGSOFT International Symposium on the Foundations of Software Engineering (FSE 2012), pages 12:1-12:11Research Triangle Park, North Carolina, USA, November 2012. [PDF][Slides] (Acceptance Rate: 35 / 201 = 17.4%)
    • Xusheng Xiao, Nikolai Tillmann, Manuel Fahndrich, Jonathan de Halleux, Michal Moskal. User-Aware Privacy Control via Extended Static-Information-Flow Analysis.  In Proceedings of the 27th IEEE/ACM International Conference on Automated Software Engineering 2012 (ASE 2012), pages 80-89, Essen, Germany, September 2012. [PDF] (Acceptance Rate: 21 / 138 = 15.2%) 
    • Rahul Pandita, Xusheng Xiao, Hao Zhong, Tao Xie, Stephen Oney, and Amit Paradkar. Inferring Method Specifications from Natural Language API Descriptions. In Proceedings of the 34rd International Conference on Software Engineering (ICSE 2012), pages 815-825, Zurich, Switzerland, June 2012. [PDF(Acceptance Rate: 87 / 408 = 21.3%) 
    • Xusheng Xiao, Tao Xie, Nikolai Tillmann, and Jonathan de Halleux. Precise Identification of Problems for Structural Test Generation. In Proceedings of the 33rd International Conference on Software Engineering (ICSE 2011), pages 611-620, Honolulu, Hawaii, USA, May 2011. [PDF (Acceptance Rate: 62 / 442 = 14%)
Patent
  • Aarti Gupta, Gogul Balakrishnan, Franjo Ivancic, Xusheng XiaoEffective Lifetime Dependency Analysis and Typestate Analysis. 2014. US Patent 20140289712 A1.
  • Xusheng Xiao, Nikolai Tillmann, Manuel Fahndrich, Jonathan de Halleux, Michal Moskal. Controlling the Release of Private Information Using Static Flow Analysis. 2013. United States Patent. US Patent 20,130,152,154
Thesis, Short Papers, and Other Publications
  • Xusheng XiaoCooperative Testing and Analysis via Informed Decision MakingDoctoral Dissertation, Department of Computer Science, North Carolina State University, June 2014. [PDF]
  • Wei Yang, Xusheng Xiao, Rahul Pandita, William Enck and Tao XieImproving Mobile Application Security via Bridging User Expectations and Application Behaviors.  ACM Symposium and Bootcamp on the Science of Security (HotSoS), Raleigh, NC, April 2014 [PDF]
    • Xusheng XiaoProblem Identification for Structural Test Generation: First Step Towards Cooperative Developer Testing.  ACM Student Research Competition (ACM SRC) Grand Finals, San Francisco, CA, June 2012. [PDF]
      • Winner of the ICSE SRC Best Project Representing an Innovative Use of Microsoft Technology
    • Xusheng XiaoProblem Identification for Structural Test Generation: First Step Towards Cooperative Developer Testing. In Proceedings of the 33rd International Conference on Software Engineering (ICSE 2011), ACM Student Research Competition (SRC), pages 1179-1181, Honolulu, Hawaii, May 2011. [PDF]
      • Won "Best project representing an innovative use of Microsoft technology" in ICSE 2011, Honolulu, HI! 
    • Xusheng Xiao, Tao Xie, Nikolai Tillmann, and Jonathan de HalleuxCovana: Precise Identification of Problems in Pex. In Proceedings of the 33rd International Conference on Software Engineering (ICSE 2011), Demonstrations Track, pages 1004-1006, Honolulu, Hawaii, May 2011.  [PDF][Demo Video].