{"690505":{"#nid":"690505","#data":{"type":"event","title":"PhD Defense by Yupeng Yang","body":[{"value":"\u003Cp\u003E\u003Cstrong\u003ETitle:\u003C\/strong\u003E Advancing Automated Program Analysis through the Lens of Program Semantics\u003C\/p\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003EDate: \u003C\/strong\u003EFriday, June 5, 2026\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003ETime: \u003C\/strong\u003E12:00-13:00\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003ELocation:\u003C\/strong\u003E\u003C\/p\u003E\u003Cul\u003E\u003Cli data-list-item-id=\u0022e8bb5ce16f88aa625540f953d646607c5\u0022\u003EIn-person: Coda C0908 Home Park\u003C\/li\u003E\u003Cli data-list-item-id=\u0022ee0308bffba065e6d0d03cbfef7537e89\u0022\u003EZoom:\u0026nbsp;\u003Ca href=\u0022https:\/\/nam12.safelinks.protection.outlook.com\/?url=https%3A%2F%2Fgatech.zoom.us%2Fj%2F95642160030%3Fpwd%3Dxa9jCpR9IjFGa35842LPyrfpB2FiwQ.1\u0026amp;data=05%7C02%7Ctm186%40gtvault.onmicrosoft.com%7C1687aebce5cb433ce4aa08debb61ba99%7C482198bbae7b4b258b7a6d7f32faa083%7C1%7C0%7C639154225646436212%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C\u0026amp;sdata=fluvrGwJ63p7rbAnb%2BQ43AopIeat7f7t9N3MMiOwNEg%3D\u0026amp;reserved=0\u0022\u003EJoin Zoom Meeting\u003C\/a\u003E\u003C\/li\u003E\u003C\/ul\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003EYupeng Yang\u003C\/strong\u003E\u003C\/p\u003E\u003Cp\u003EPh.D. Candidate\u003C\/p\u003E\u003Cp\u003ESchool of Cybersecurity and Privacy\u003C\/p\u003E\u003Cp\u003EGeorgia Institute of Technology\u003C\/p\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003ECommittee:\u003C\/strong\u003E\u003C\/p\u003E\u003Cp\u003EDr. Wenke Lee (Advisor): School of Cybersecurity and Privacy, Georgia Institute of Technology\u003C\/p\u003E\u003Cp\u003EDr. Brendan Saltaformaggio: School of Cybersecurity and Privacy, Georgia Institute of Technology\u003C\/p\u003E\u003Cp\u003EDr. Mustaque Ahamad: School of Cybersecurity and Privacy, Georgia Institute of Technology\u003C\/p\u003E\u003Cp\u003EDr.\u0026nbsp;Sukarno Mertoguno: School of Cybersecurity and Privacy, Georgia Institute of Technology\u003C\/p\u003E\u003Cp\u003EDr. Kexin Pei: Department of Computer Science,\u0026nbsp;The University of Chicago\u003C\/p\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003E\u003Cstrong\u003EAbstract:\u003C\/strong\u003E\u003C\/p\u003E\u003Cp\u003EProgram analysis is essential for software security because it helps developers discover bugs, vulnerabilities, and reliability issues by analyzing code behavior and execution paths. However, analyzing modern software remains difficult because programs often require highly structured inputs and satisfy complex syntactic, semantic, and path constraints before reaching deep behaviors. Existing techniques such as grey-box fuzzing and symbolic execution can scale broadly, but they frequently waste effort exploring invalid inputs or shallow execution states. In contrast, approaches that incorporate semantic knowledge can guide analysis more effectively, though they have traditionally required extensive manual effort, making them hard to generalize.\u003C\/p\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003EThis dissertation argues that integrating program semantics into automated analysis can make exploration both more effective and more generalizable. The key insight is that semantic knowledge, whether explicitly modeled by humans or inferred automatically using large language models (LLMs), helps analysis systems understand the meaning of inputs, prioritize important constraints, and focus exploration on valuable program behaviors. To demonstrate this idea, the dissertation introduces BuzzBee, a semantics-aware fuzzing framework for database management systems. By modeling common data operations and dependencies, BuzzBee generates semantically meaningful test cases and discovers 40 vulnerabilities across 8 DBMSs and 4 data models.\u003C\/p\u003E\u003Cp\u003E\u0026nbsp;\u003C\/p\u003E\u003Cp\u003EThe dissertation further explores LLM-guided program analysis through two systems: HLPFuzz and Klleem. HLPFuzz uses LLMs to infer and solve hard constraints arising in language processors, enabling fuzzers to reach deeper program states and uncover 52 bugs across 9 systems. Klleem applies LLMs to symbolic execution by synthesizing semantic assumptions that reduce low-value exploration while preserving important behaviors, achieving up to 61% higher code coverage and a 2.5\u00d7 increase in bug detection rate over baselines, across 10 real-world software systems. Together, these systems demonstrate that semantic reasoning, especially when combined with LLMs, can significantly improve the effectiveness and generality of automated program analysis.\u003C\/p\u003E","summary":"","format":"limited_html"}],"field_subtitle":"","field_summary":[{"value":"\u003Cp\u003EAdvancing Automated Program Analysis through the Lens of Program Semantics\u003C\/p\u003E","format":"limited_html"}],"field_summary_sentence":[{"value":"Advancing Automated Program Analysis through the Lens of Program Semantics"}],"uid":"27707","created_gmt":"2026-05-27 13:41:12","changed_gmt":"2026-05-27 13:54:33","author":"Tatianna Richardson","boilerplate_text":"","field_publication":"","field_article_url":"","field_event_time":{"event_time_start":"2026-06-05T12:00:00-04:00","event_time_end":"2026-06-05T14:00:00-04:00","event_time_end_last":"2026-06-05T14:00:00-04:00","gmt_time_start":"2026-06-05 16:00:00","gmt_time_end":"2026-06-05 18:00:00","gmt_time_end_last":"2026-06-05 18:00:00","rrule":null,"timezone":"America\/New_York"},"location":"Coda C0908 Home Park","extras":[],"groups":[{"id":"221981","name":"Graduate Studies"}],"categories":[],"keywords":[{"id":"100811","name":"Phd Defense"}],"core_research_areas":[],"news_room_topics":[],"event_categories":[{"id":"1788","name":"Other\/Miscellaneous"}],"invited_audience":[{"id":"78771","name":"Public"}],"affiliations":[],"classification":[],"areas_of_expertise":[],"news_and_recent_appearances":[],"phone":[],"contact":[],"email":[],"slides":[],"orientation":[],"userdata":""}}}