Program
ISSRE 2026 · Detailed Conference Programme
20–23 October 2026
St. Raphael Resort · Limassol, Cyprus
Programme badges
Distinguished Paper · Track
Code Available
Code Reviewed
Code Reproducible
Data Available
Data Reviewed
Data Reproducible
Artifact Evaluation badges identify the code and data materials granted Available, Reviewed, or Reproducible status.
Day 1 · Tuesday, 20 October
Schedule available
Workshops & Doctoral Consortium
WoSAR
ReSAISE
AISQ
Session 1 · Research proposals
3 agenda items View details
-
09:00–09:30Opening + Warm up (Self introduction, some polling questions)
-
09:30–10:00Toward Reliable Detection of Android Lifecycle Violations with Static Analysis and Domain-Adapted Code Models
-
10:00–10:30From Disclosure to Exploit: Data Availability, Patch Behaviour and Exploitability Prediction in the Vulnerability Lifecycle
WoSAR
ReSAISE
AISQ
Session 2 · Research proposals (continued)
3 agenda items View details
-
11:00–11:30Dependability of Embedded Perception in Autonomous Driving
-
11:30–12:00The Cognitive Cost of Vibe Coding - Making Developer Comprehension Observable in AI-Assisted Software Engineering
-
12:00–12:30Upholding Normative Requirements in Robotics and Autonomous Systems
QA4Agents
ReSAISE
AISQ
Session 3 · Research tools and artifacts
2 agenda items View details
-
14:00–14:45Building Tools, Finding Questions: Experiences with Artifacts in Dependability Research (invited talk)
-
14:45–15:30Tool/Artifact Presentations I
Workshop names link to their respective websites. Links open in the same tab for reliable iPad behaviour.
Day 2 · Wednesday, 21 October
Schedule available
Main Conference
Room: PanoramaPlenary sessionWelcome & Keynote by Laurie Williams
Session chair:Domenico Cotroneo
Continuous integration
Session chairFabrizio Pastore
5 presentations View details
-
11:00–11:18RES18 minCross-Platform CI/CD Configuration Migration based on LLMs: How Far Are We?
-
11:18–11:36INDUSTRY18 minMaking Deployments Safe at Meta: Health Checks for Continuous Change-SafetyIndustry Track Distinguished Paper
-
11:36–11:54INDUSTRY18 minPomona: Continuous Code Quality Improvement via Small, Agentic Pull Requests at Bloomberg
-
11:54–12:12INDUSTRY18 minThe Reliability Debt at Rust/C Boundaries: Practical FFI Contract Checking in Industrial CI Pipelines
-
12:12–12:30INDUSTRY18 minMaking Bounded C/C++ Verification Practical in Continuous Integration: A Verdict-Aware Learned-Rule Hybrid Selector under Reliability Budgets
Automated program repair
Session chairXiao-Yi Zhang
5 presentations View details
-
11:00–11:18RES18 minAPR-Router: Complexity-Aware Cascade Routing for Cost-Effective LLM-Based Program RepairCode AvailableCode ReviewedCode ReproducibleData AvailableData ReviewedData Reproducible
-
11:18–11:36RENE18 minHype Meets Reality: Large Language Models as Mutators in Search-based Automated Program Repair of Simulink-Stateflow Models
-
11:36–11:54RES18 minTraceGate: Policy-Based Disclosure of Structured Crash Evidence for LLM-Assisted Debugging
-
11:54–12:12INDUSTRY18 minMPTA-Repair: Multi-Property Clock Bound Repair for Networks of Timed Automata via Iterative Space Optimization
-
12:12–12:30RES18 minLongRepair: Enhancing Multi-Hunk Automated Program Repair via Reasoning-Oriented Imitation and Reinforcement Learning
ML-based systems (1)
Session chairEvgenia Smirni
5 presentations View details
-
11:00–11:18RES18 minConcept-Based Fairness Testing for Deep Vision Models
-
11:18–11:36RES18 minExposing Hidden Intersectional Bias in LLMs
-
11:36–11:54RES18 minGePS-Guided AG-CAM: An Adaptive Approach for Jailbreaking Aligned LLMs via Defense Diagnosis
-
11:54–12:12RES18 minOn the Robustness of Large Language Models and Guardrails Against Cybersecurity Jailbreaks
-
12:12–12:30RES18 minFrom Shortcut Testing to Adaptive Reweighting: Improving Fairness in Large Pre-trained Models
Binary and firmware code analysis for security
Session chairIlir Gashi
5 presentations View details
-
11:00–11:18TAR18 minQuantifying Programs’ Robustness Against Multi-Fault Control-Flow Attacks by Static AnalysisCode AvailableCode ReviewedData AvailableData Reviewed
-
11:18–11:36RES18 minReqSource: Request-Aware Source Refinement for Binary Firmware Taint Analysis
-
11:36–11:54RES18 minTopoRL: Topology-Aware Reinforcement Learning for Robustness Evaluation of Binary Similarity Detection
-
11:54–12:12RES18 minBranchCARET Model Checking of Self Modifying Code
-
12:12–12:30RES18 minMARD: A Multi-Agent Framework for Robust Android Malware Detection
AIOps (1)
Session chairZexin Wang
4 presentations View details
-
14:00–14:18RES18 minBTSB: Business-Level Time Series Anomaly Detection Benchmark
-
14:18–14:36INDUSTRY18 minCoLMAD: Collaborating with Large Language Models for Scalable and Adaptive Time Series Anomaly Detection
-
14:36–14:54INDUSTRY18 minChainCraft: Bridging Causal Discovery and LLM Reasoning for Failure Prediction in Microservices
-
14:54–15:12RES18 minCANOPY: LLM-Driven Tree-ReAct for Microservice RCA with Evidence Sharing and Information-Gain-Guided Probing
LLM-based testing
Session chairCarmine Cesarano
5 presentations View details
-
14:00–14:18INDUSTRY18 minLLM-Driven Test Case Generation via Requirement Item Extraction and Stepwise Prompting
-
14:18–14:36PER18 minAn Incremental Unit Testing Strategy for Clojure Programs: A Comparative Study of Manual and LLM-Generated Tests
-
14:36–14:54RES18 minGraceful Restart Testing for Distributed Systems via LLM-Based Test Transformation
-
14:54–15:12INDUSTRY18 minLLM-based Integration Test Suite Augmentation for Microservice-based Systems in the Space Domain
-
15:12–15:30RES18 minSE-GTR: Smell Evidence-Guided Repair of Automatically Generated Unit Tests
ML-based systems (2)
Session chairJosé D'Abruzzo Pereira
4 presentations View details
-
14:00–14:18RES18 minSharp Edges vs. Probabilistic Failure Boundaries: an Exploratory Study in Deep Learning System Testing
-
14:18–14:36RES18 minRepTran: Search-Based Repair of Transformer Models
-
14:36–14:54RES18 minA MAPE-K Instantiation for Dependable Normative Adaptation in Intelligent Agents
-
14:54–15:03FA9 minUnderstanding Anti-Patterns in Agent Skills
Bug & vulnerability analysis
Session chairRoberto Natella
5 presentations View details
-
14:00–14:18RES18 minA Comprehensive Study of Secure Multi-Party Computation Framework BugsCode AvailableCode ReviewedCode ReproducibleData AvailableData ReviewedData Reproducible
-
14:18–14:36RES18 minToward a Theory of Software Supply Chain Security Metric Success
-
14:36–14:54RES18 minVulnerability Metadata Availability GapCode AvailableCode ReviewedCode ReproducibleData AvailableData ReviewedData Reproducible
-
14:54–15:12RES18 minWhen Agents Fail: A Comprehensive Study of Bugs in LLM Agents with Automated LabelingResearch Track Distinguished Paper
-
15:12–15:30RES18 minJetTyped: A Study of Cross-Language Type Bugs in Android's JavaScriptEngine
AIOps (2)
Session chairZexin Wang
5 presentations View details
-
16:00–16:18INDUSTRY18 minOpsMem: Dual-Memory Reasoning with Cross-Memory Resonance for Failure Diagnosis
-
16:18–16:36RES18 minOpsLLM: Construction of Large Language Model for Software Operations with Multi-stage Learning
-
16:36–16:54RES18 minDivide and Diagnose: Enhancing Multimodal Failure Diagnosis by Mixture-of-Experts for Microservice Systems
-
16:54–17:12IND TALK/TOOL18 minRethinking Software Validation in the Age of AI-Accelerated Development
-
17:12–17:21INDUSTRY SHORT9 minAutomated Retrospective Evaluation of Al-Assisted Incident Investigation Agents in Cloud Operations: An Industrial Experience
Software Testing
Session chairNuno Laranjeiro
5 presentations View details
-
16:00–16:18RES18 minSearch-Based Software Aging Testing for Android Applications
-
16:18–16:36RES18 minFault Injection in OpenAPI Specifications for Evaluating Black-Box Testing Effectiveness
-
16:36–16:54INDUSTRY18 minThe Polyglot's Dilemma: Conformance Testing a Dozen Specs in as Many Languages
-
16:54–17:12INDUSTRY18 minBehavioral Fingerprinting of ERC Tokens at Scale: A Conformance Test Suite as an Ecosystem Sensor
-
17:12–17:30IND TALK/TOOL18 minMulti-Level Conformance Testing of ERC Tokens with ERCx
ML-based systems (3)
Session chairJoão R. Campos
4 presentations View details
-
16:00–16:18RES18 minPromptStitch: Two-Stage Prompt Extraction via Template Matching and Suffix Optimization
-
16:18–16:36RES18 minModeling Memory-Dependent Reliability of LLMs: A Hidden Markov Model
-
16:36–16:54PER18 minReliability Characterization for N-version Object DetectionCode AvailableCode ReviewedCode ReproducibleData AvailableData ReviewedData Reproducible
-
16:54–17:12INDUSTRY18 minEngineering Reliability into LLM Multi-Agent Systems: An Industrial Experience
Reliability against physical faults
Session chairDarko Marinov
5 presentations View details
-
16:00–16:18RES18 minAssessing the impact of transpilation on the reliability of quantum circuit results
-
16:18–16:36RES18 minResilience for Free: Exploiting Performance-Neutral Redundancy in HPC
-
16:36–16:54RES18 minResilient Page Table Management under ECC-uncorrectable Memory ErrorsResearch Track Distinguished Paper
-
16:54–17:12RES18 minSIEVE: Hybrid Hardware/Software Detection of Multi-Bit Errors in Random-Access MemoryCode AvailableCode ReviewedCode ReproducibleData AvailableData ReviewedData Reproducible
-
17:12–17:30INDUSTRY18 minFrom Noisy Telemetry to Actionable Warnings: GPU Failure Prediction in Industrial Clusters
Presentation durations: 18 minutes for full papers and 9 minutes for FAPH and short industry papers.
Day 3 · Thursday, 22 October
Schedule available
Main Conference
Room: PanoramaPlenary sessionAwards & Keynote by Don Syme
Session chair:Sigrid Eldh
LLM code generators (1)
Session chairJoão R. Campos
5 presentations View details
-
11:00–11:18RES18 minBeyond Vibe Coding: Generalisation-Aware Evaluation of Multimodal Code Comprehension Prediction
-
11:18–11:36RES18 minFrom Discussion to Execution: Replicating Buggy and Correct Data Science CodeCode AvailableCode ReviewedData AvailableData Reviewed
-
11:36–12:54RES18 minEscaping Collocation Traps: Periodic Multi-Color Watermarking for AI Code Generation
-
11:54–12:12RES18 minRobustness and Trade-offs for Code LLMs on Protected Code
-
12:12–12:30INDUSTRY18 minLightweight, Rubric-Guided Trajectory Evaluation for Production AI Agents
RCA and Failure Management
Session chairFumio Machida
5 presentations View details
-
11:00–11:18INDUSTRY18 minPrism: Knowledge Management for Root-Cause Analysis and Mitigation in Serverless Computing
-
11:18–11:36INDUSTRY18 minWhere to Look First: Incident Memory for Alert-Time Triage of Microservice Applications
-
11:36–11:54RENE18 minFrom Benchmark Accuracy to Diagnostic Boundaries: A Time-Aware Replication of DESTRENE Distinguished Paper
-
11:54–12:12IND TALK/TOOL18 minSLACHECK: From Live Observability Data to a Committable SLA Envelope
-
12:12–12:30INDUSTRY18 minThe Coherence Trap: Layer-Decomposed Failure-Mode Discovery in a Deployed Agentic LLM System
Software and systems engineering
Session chairJosé D'Abruzzo Pereira
6 presentations View details
-
11:00–11:18PER18 minLLM-Assisted CVE Triage for IoT Gateways: A Human-in-the-Loop Empirical Study
-
11:18–11:36INDUSTRY18 minA Clustering-based Hybrid Ranking for Defect Prediction in Industrial Power Grid Software Systems
-
11:36–11:54INDUSTRY18 minTowards Seamless Zero-Downtime Upgrades of Safety-Related Automation Functions on Standard Industrial Hardware
-
11:54–12:12J1C218 minElicit, specify, require, revise: enhancing requirements engineering process using gamification
-
12:12–12:21FA9 minA User-Driven Engineering Process for the Support4Resilience Toolbox
-
12:21–12:30INDUSTRY SHORT9 minSPRING: Stored Procedure Retry for Idempotent Native Guarantees in Snowpark
Fuzzing and symbolic execution
Session chairHorst Schirmeier
5 presentations View details
-
11:00–11:18RES18 minState Back-off Control for Reliable Progress in Dynamic Symbolic Execution
-
11:18–11:36RES18 minNeuroMerge: ML-Guided State Merging for Efficient Symbolic Execution
-
11:36–11:54RES18 minEnumetrics: Enhancing Coverage-guided Fuzzing with Enumeration-aware Feedback
-
11:54–12:12RENE18 minBetter Distributional Fit Does Not Improve Reachable Coverage Estimation in Fuzzing
-
12:12–12:30TAR18 minFuzzing Graal CompilerCode AvailableCode ReviewedCode ReproducibleData AvailableData ReviewedData Reproducible
Room: PanoramaPlenary session
Test-of-Time Retrospective talk
S. He, J. Zhu, P. He and M. R. Lyu, “Experience Report: System Log Analysis for Anomaly Detection,” ISSRE 2016.
Session chair:Marco Vieira
Panel on Agentic AI
Moderator: Preeti Chauhan
Panelists: Fenareti Lampathaki, Janet Lin, Michalis Sirivianos, and Angelos Stavrou
LLM code generators (2)
Session chairDiego Clerissi
4 presentations View details
-
16:00–16:18PER18 minUnreliable in Practice? A Comprehensive Study of Errors in LLM-Generated Code
-
16:18–16:36RES18 minCARE: Pre-Execution Command Verification for Shell-Executing LLM AgentsCode AvailableCode Reviewed
-
16:54–17:12INDUSTRY18 minAEC: Mitigating Silent Failures in LLM-Assisted Exploit Migration
-
17:12–17:30RES18 minAutonomous Exploitation of Python Vulnerabilities with AI Agents
Safety assurance
Session chairNaghmeh Ivaki
5 presentations View details
-
16:00–16:18RES18 minCUBICS: A modular approach for continuous safety assurance using Subjective LogicCode AvailableCode Reviewed
-
16:18–16:36RES18 minSafety Reference Benchmarks with Avoidability Criteria for Evaluating Autonomous Driving SystemsCode AvailableCode ReviewedCode ReproducibleData AvailableData ReviewedData Reproducible
-
16:36–16:54RES18 minSynergistic Simplex: Cooperative Runtime Assurance for Safety-Critical Autonomous Systems
-
16:54–17:12J1C218 minLLMs as judges: Toward the LLM-assisted review of GSN-compliant assurance cases
-
17:12–17:30INDUSTRY18 minAn Agentic RAG and Evaluation Framework for Assurance Case Generation: Industrial Use Case for the EU Cyber Resilience Act Compliance
Metamorphic testing and debugging
Session chairFabrizio Pastore
5 presentations View details
-
16:00–16:18RES18 minCompositional Constructive Metamorphism for Testing Constraint Checking ImplementationsCode AvailableCode Reviewed
-
16:18–16:36RES18 minProgram Reversal for Error Reachability AnalysisCode AvailableCode ReviewedCode ReproducibleData AvailableData ReviewedData Reproducible
-
16:36–16:54RES18 minDr. DD: 1-Minimal Isolation of Failure Causes via Deferred RestartsCode AvailableCode ReviewedCode ReproducibleData AvailableData ReviewedData Reproducible
-
16:54–17:12RES18 minRevealing Transaction Bugs in DBMS Engines with Metamorphic Testing
-
17:12–17:30RES18 minRotDroid: Cross-Orientation State Equivalence Testing for Detecting GUI Rotation Bugs in Android AppsResearch Track Distinguished PaperCode AvailableCode ReviewedData AvailableData ReviewedData Reproducible
Presentation durations: 18 minutes for full papers and 9 minutes for FAPH and short industry papers.
Day 4 · Friday, 23 October
Schedule available
Main Conference
Room: PanoramaPlenary sessionKeynote by Paolo Tonella
Session chair:Leonardo Mariani
ML for bug and vulnerability detection
Session chairDomenico Cotroneo
4 presentations View details
-
11:00–11:18RES18 minDetecting Dependency Bugs in Deep Learning Stacks via LLM-Powered Dependency Graph Construction
-
11:18–11:36RES18 minCalibration Without Comprehension: Diagnosing the Limits of Fine-Tuning LLMs for Vulnerability Detection in Systems SoftwareResearch Track Distinguished Paper
-
11:36–11:54PER18 minUsing Source Code Data Structures to Detect Vulnerable Code Units with Deep Graph Convolutional Neural Networks
-
11:54–12:12RES18 minAutoTrace: From Patches to Triggers via Agentic Interprocedural Exploration
Reliability in HPC systems
Session chairGeorge Papadopoulos
5 presentations View details
-
11:00–11:18RES18 minAgentLog: Evidence-Adaptive LLM Agent for Log Anomaly Detection in Production HPC Systems
-
11:18–11:36INDUSTRY18 minKnowLution: A Multi-Agent Framework for Execution-Oriented Autonomous Operations in Production Supercomputers
-
11:36–11:54INDUSTRY18 minSLoFI: Low-Privilege Fault Injection for Reliability Testing in Production Supercomputers
-
11:54–12:12PER18 minChallenges and Trade-offs of ML-Based GPU Error Prediction: A Case Study on SummitCode AvailableCode ReviewedData AvailableData Reviewed
-
12:12–12:30INDUSTRY18 minTHXInLog: Robust Semantic-Temporal Framework for Log Anomaly Detection in Production Supercomputers
Software verification
Session chairSigrid Eldh
5 presentations View details
-
11:00–11:18RES18 minAn Empirical Study of LLM-Generated Specifications for VeriFastCode AvailableCode ReviewedCode ReproducibleData AvailableData ReviewedData Reproducible
-
11:18–11:36RES18 minAutomated Fault Localization for Verification-Aware Languages: A Study on DafnyCode AvailableCode ReviewedCode Reproducible
-
11:36–11:54RES18 minToward Verified Code from Natural Language: Understanding Pipeline Design for Formally Verified Rust Program Generation
-
11:54–12:12RENE18 minA First Look at Learned Splitting Heuristics for Parallel String Solvers
-
12:12–12:30INDUSTRY18 minThe Prover Is the Judge: Verified Security Software from AI Coding Agents in Ada/SPARKIndustry Track Distinguished Paper
Reliability of autonomous systems
Session chairLeonardo Mariani
5 presentations View details
-
11:00–11:18RES18 minBayScen: Standards-Grounded Scenario Generation for Autonomous Vehicle Testing via Bayesian Networks and Capability AbstractionCode AvailableCode ReviewedCode ReproducibleData AvailableData ReviewedData Reproducible
-
11:18–11:36RES18 minIMPACT: Camera and LiDAR Contributions to End-to-End Autonomous Driving RisksCode Available
-
11:36–11:54PER18 minOn the Effectiveness of Open-Loop DNN Repair in End-to-End Autonomous Driving Systems
-
11:54–12:12RES18 minHow to Break a Swarm: Search-based Robustness Testing of Decentralized UAV SwarmsCode AvailableData Available
-
12:12–12:30RES18 minTest model abstraction for robotic systems
Systems security
Session chairMarco Vieira
5 presentations View details
-
14:00–14:18RES18 minNeurosymbolic Characterization for Reliable Access Control Policy AnalysisCode AvailableCode ReviewedData AvailableData Reviewed
-
14:18–14:36RES18 minKubeCap: A Framework for Capability Minimization in Kubernetes via Static Analysis and LLM-Assisted Rule Inference
-
14:36–14:54TAR18 minProvScope: A tool to assist cybersecurity analysts in identifying information flows in complex systemsResearch Track Distinguished Paper
-
14:54–15:12RENE18 minWhen Verifier Offloading Fails: The RATS Passport Model in Constrained Massive IoT Networks
-
15:12–15:30TAR18 minZKGuard: A Zero-Knowledge Policy Engine for On-Chain Transactions
Anomaly detection
Session chairDiego Clerissi
5 presentations View details
-
14:00–14:18INDUSTRY18 minHSMLog: Small Language Model-Assisted Hardware Security Module Log Anomaly Detection with Behavioral Analysis
-
14:18–14:36RES18 minFAME: Failure-Aware Mixture-of-Experts for Message-Level Log Anomaly DetectionCode Available
-
14:36–14:54RES18 minGenVer-Log: Generation-Verification-Guided Online Log Parsing via Self-Evolving In-Context Learning
-
14:54–15:12PER18 minUnderstanding Online Failure Prediction in Linux Through Complementary Multi-View Explainability
-
15:12–15:21FA9 minWhen Logs Are Not Enough: Reconstructability as a Reliability Requirement for AI-Enabled Software Systems
Formal methods for reliability and security
Session chairMatteo Camilli
4 presentations View details
-
14:00–14:18J1C218 minAutomated Generation of Benchmarks for Falsification of STL Specifications
-
14:18–14:36RES18 minSynthesis of Sensor Deception Attacks against Security for Timed Supervisory Control Systems
-
14:36–14:54RES18 minOracle-Guided Reliability Regression Analysis for Evolving IoT Authentication Protocols
-
14:54–15:12RES18 minManifest Bound Release Control for a Confidential Kubernetes Service Boundary
Room: PanoramaPlenary sessionClosing, Open Forum
Session chair:Marco Vieira
Presentation durations: 18 minutes for full papers and 9 minutes for FAPH and short industry papers.