Editing Software Engineering (Fall 2025) (section)

=== October 30 (Thursday) --  Evidence Part 1:  Static Analysis, Fuzzing, and Scanning  ===


'''Before Class:'''
* Read [https://canvas.uw.edu/courses/1838606/files/folder/Week%206?preview=140453242 Reading Note 10]
* Watch my mini-lecture on [https://canvas.uw.edu/courses/1838606/files/folder/Week%206?preview=140336974 Static Analysis, Fuzzing, and Scanning]
* Watch this lecture from [https://youtu.be/_HUcBzYuWmM?si=rfGRBEFz3PpY3q08 Marcel Bohme: "On the Surprising Efficiency and Exponential Cost of Fuzzing"]
* Read [https://canvas.uw.edu/courses/1838606/files/folder/Week%206?preview=140336950 Chapter 9] in Oram & Wilson's '''Making Software: An Automated Fault Prediction System''', chapter written by Weyuker and Ostrand

'''Class Goals:'''
* Discuss Reading Note 10
* Standup
* Run [[ESLint]] on your code. What issues did you find? Any good user stories? This might help you with task 5!
* Final round of planning poker
* Hands-on / triage issues with Task 5

'''Class Materials:'''
* [https://canvas.uw.edu/courses/1838606/files/folder/Week%206?preview=141089765 Discussion board]
* [https://uw.hosted.panopto.com/Panopto/Pages/Viewer.aspx?id=71d8f707-17f4-4104-9e20-b3860172af00 Panopto recording]

'''Optional Resources'''
* If you didn't follow the Fuzzing video, try this [https://www.youtube.com/watch?v=17ebHty54T4 overview of Fuzzing from David Brumley] and then give the Bohme lecture another try :)
* The [https://en.wikipedia.org/wiki/Fuzzing coverage of Fuzzing on Wikipedia] is also quite good.
* [https://faculty.washington.edu/lagesse/publications/ICSE2023.pdf This great paper describes using architectural and specification documents in predictions] of vulnerabilities -- written by Poozhithara, Asuncion, and Lagesse here at UW Bothell

<!-- Ch 10-11 in making software -->