ISSTA 2016 41 papers accepted. Updated on 2023-10-06. You can find the lastest information here. DEKANT: a static analysis tool that learns to detect web application vulnerabilities. Automated and effective testing of web services for XML injection attacks. Binary code is not easy. Specification of concretization and symbolization policies in symbolic execution. EagerMerge: an optimistic technique for efficient points-to analysis. IPA: improving predictive analysis with pointer analysis. Generating focused random tests using directed swarm testing. Monkey see, monkey do: effective generation of GUI tests with inferred macro events. Sapienz: multi-objective automated testing for Android applications. FSX: fine-grained incremental unit test generation for C/C++ programs. CSNIPPEX: automated synthesis of compilable code snippets from Q&A sites. Automatic test case generation: what if test code quality matters? Analyzing test completeness for dynamic languages. Unveiling anomalies and their impact on software quality in model-based automotive software revisions with software metrics and domain experts. Practitioners' expectations on automated fault localization. A learning-to-rank based fault localization approach using likely invariants. Optimal sanitization synthesis for web application vulnerability repair. ARROW: automated repair of races on client-side web pages. Automatic generation of oracles for exceptional behaviors. Verdict machinery: on the need to automatically make sense of test results. Testing stochastic software using pseudo-oracles. Test oracle assessment and improvement. DSI: an evidence-based approach to identify dynamic data structures in C programs. Documenting database usages and schema constraints in database-centric applications. Exploring regular expression usage and context in Python. Toward understanding compiler bugs in GCC and LLVM. Semantic modelling of Android malware for effective malware comprehension, detection, and classification. DroidRA: taming reflection to support whole-program analysis of Android apps. Mutation-aware fault prediction. Predictive mutation testing. Threats to the validity of mutation-based test assessment. Efficient race detection in the presence of programmatic event loops. Automatically verifying and reproducing event-based races in Android apps. SyncProf: detecting, localizing, and optimizing synchronization bottlenecks. Zero-overhead profiling via EM emanations. Efficient flow profiling for detecting performance bugs. Energy-aware test-suite minimization for Android apps. COSTOTest: a tool for building and running test harness for service-based component models (demo). ASTOR: a program repair library for Java (demo). Jolinar: analysing the energy footprint of software applications (demo). PIT: a practical mutation testing tool for Java (demo).