{"595662":{"#nid":"595662","#data":{"type":"news","title":"Paper Awarded for Long-Lasting Impact on Software Testing and Analysis","body":[{"value":"\u003Cp\u003E\u003Ca href=\u0022https:\/\/www.scs.gatech.edu\/people\/10892\/alessandro-orsos\u0022\u003E\u003Cstrong\u003EAlessandro Orso\u003C\/strong\u003E\u003C\/a\u003E, a professor in Georgia Institute of Technology\u0026rsquo;s College of Computing, won the ISSTA Impact Paper Award at the 2017 \u003Ca href=\u0022https:\/\/conf.researchr.org\/home\/issta-2017\u0022\u003EInternational Symposium on Software Testing and Analysis\u003C\/a\u003E (ISSTA) conference in July in Santa Barbara, California.\u003C\/p\u003E\r\n\r\n\u003Cp\u003EEvery year, the award honors a paper that has had considerable influence in the software testing and analysis field over the past decade. Orso \u0026ndash; who is the associate chair for the School of Computer Science \u0026ndash; won the award for his work on the 2007 paper entitled \u003Ca href=\u0022https:\/\/www.cc.gatech.edu\/~orso\/papers\/clause.li.orso.ISSTA07.pdf\u0022\u003E\u003Cem\u003EDytan: A Generic Dynamic Taint Analysis Framework\u003C\/em\u003E\u003C\/a\u003E, coauthored with two former students: first author \u003Ca href=\u0022https:\/\/www.eecis.udel.edu\/~clause\/\u0022\u003E\u003Cstrong\u003EJames Clause\u003C\/strong\u003E\u003C\/a\u003E (now an assistant professor at University of Delaware) and \u003Cstrong\u003EWanchun Li\u003C\/strong\u003E (now a cybersecurity consultant in Seattle).\u003C\/p\u003E\r\n\r\n\u003Cp\u003EThe researchers first presented the paper at the ISSTA conference in 2007. Dynamic tainting (also known as dynamic information flow analysis) computes how data flows through a system by labeling inputs and tracking them as they are processed by the software. The method is often used in cybersecurity to ensure no malicious inputs reach sensitive parts of a system. At the time of this work, dynamic tainting systems were ad-hoc and specific to the data and task they were targeting.\u003C\/p\u003E\r\n\r\n\u003Cp\u003EIn this research, Orso and his team built a framework for information flow analysis, called Dytan, that was general enough that others could customize it and use it for their research. While Orso and his students initially built the framework for their own debugging research, they soon realized that, by putting some extra effort into it, Dytan could benefit the broader research community.\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u0026ldquo;We saw it as a service to the community,\u0026rdquo; Orso said. \u0026ldquo;Since we\u0026rsquo;re doing this, let\u0026rsquo;s do it right and make it general enough and available so that people can use it.\u0026rdquo;\u003C\/p\u003E\r\n\r\n\u003Cp\u003EThe broad implications of Dytan have rippled through the field and across CS areas. The paper has become the standard reference for dynamic tainting, cited more than 400 times in the software engineering, security, systems, database, and computer architecture communities. At one point, the researchers were even approached by Visa Europe, who were interested in using Dytan to track the flow of credit card information through their system.\u003C\/p\u003E\r\n\r\n\u003Cp\u003EDynamic tainting analysis has expanded past Orso\u0026rsquo;s initial framework, but he still uses elements of it in his research today. For a current \u003Ca href=\u0022https:\/\/www.darpa.mil\/\u0022\u003EDefense Advanced Research Projects Agency\u003C\/a\u003E (DARPA) project, for instance, Orso and his collaborators analyze cybersecurity attacks using dynamic tainting analysis to learn where attacks originate.\u003C\/p\u003E\r\n\r\n\u003Cp\u003EOrso said he is humbled and honored to be recognized for this research.\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u0026ldquo;It\u0026rsquo;s much more exciting because it\u0026rsquo;s given based on how successful your work really was based on the opinion of your peers and your community.\u0026rdquo;\u003C\/p\u003E\r\n","summary":null,"format":"limited_html"}],"field_subtitle":"","field_summary":"","field_summary_sentence":[{"value":"SCS Professor Alessandro Orso won the ISSTA Impact Paper Award."}],"uid":"34541","created_gmt":"2017-09-07 17:36:10","changed_gmt":"2017-09-07 17:47:17","author":"Tess Malone","boilerplate_text":"","field_publication":"","field_article_url":"","dateline":{"date":"2017-09-07T00:00:00-04:00","iso_date":"2017-09-07T00:00:00-04:00","tz":"America\/New_York"},"extras":[],"hg_media":{"62584":{"id":"62584","type":"image","title":"Alessandro Orso","body":null,"created":"1449176382","gmt_created":"2015-12-03 20:59:42","changed":"1475894544","gmt_changed":"2016-10-08 02:42:24","alt":"Alessandro Orso","file":{"fid":"191644","name":"alex-orso.jpg","image_path":"\/sites\/default\/files\/images\/alex-orso_0.jpg","image_full_path":"http:\/\/www.tlwarc.hg.gatech.edu\/\/sites\/default\/files\/images\/alex-orso_0.jpg","mime":"image\/jpeg","size":11677,"path_740":"http:\/\/www.tlwarc.hg.gatech.edu\/sites\/default\/files\/styles\/740xx_scale\/public\/images\/alex-orso_0.jpg?itok=8Dj-c-oP"}}},"media_ids":["62584"],"groups":[{"id":"50875","name":"School of Computer Science"},{"id":"47223","name":"College of Computing"}],"categories":[],"keywords":[],"core_research_areas":[{"id":"39541","name":"Systems"}],"news_room_topics":[],"event_categories":[],"invited_audience":[],"affiliations":[],"classification":[],"areas_of_expertise":[],"news_and_recent_appearances":[],"phone":[],"contact":[{"value":"\u003Cp\u003ETess Malone, Communications Officer\u003C\/p\u003E\r\n\r\n\u003Cp\u003E\u003Ca href=\u0022mailto:tess.malone@cc.gatech.edu\u0022\u003Etess.malone@cc.gatech.edu\u003C\/a\u003E\u003C\/p\u003E\r\n","format":"limited_html"}],"email":["tess.malone@cc.gatech.edu"],"slides":[],"orientation":[],"userdata":""}}}