About Me
I'm an Assistant Professor in the Kahlert School of Computing at The University of Utah. I earned my Ph.D. in Computer Science from Virginia Tech in 2022, and my Bachelor's in Computer Science from The University of Illinois Urbana-Champaign in 2016.
Broadly, I lead research and teach students in the areas of Software Engineering, Software Quality Assurance, and Computer Systems. Key topics I work on include software testing, program analysis, and bug repair. I'm especially interested in making efficient and effective quality assurance possible for opaque and otherwise challenging software and systems.
Contact Information
|
3446 Merrill Engineering (MEB) 50 Central Campus Drive Salt Lake City, UT 84112 |
|
| snagy@cs.utah.edu | |
| +1 801-581-8224 |
Research Summary
| Software Testing & Automated Bug Discovery: | FSE'26c ASE'25 ICSE'25b ICSE'25a ISSTA'25 CCS'23 |
| Binary Analysis & Reverse Engineering: | FSE'26b SEC'23 CCS'21 SEC'21 S&P'19 |
| Compilation & Translation Validation: | FSE'26a ACSAC'25 ATC'25 |
| Cybersecurity Ethics & Education: | ISTAS'19 ICSE'18 ICDF2C'15 SADFE'15 |
Teaching
| CS 4440: Introduction to Computer Security | Course Site |
| CS 5493 / 6493: Applied Software Security Testing | Course Site |
Recent Publications
A full and up-to-date publications list is available on the FuTURES3 Lab website. Names of my advised students are underlined.
SnakeCharmer: Automatic Fuzzing Harness Generation for Pure and Hybrid Python Libraries
Gabriel Sherman and Stefan Nagy.
ACM International Conference on the Foundations of Software Engineering (FSE'26).
Binvariants: Enhancing Fuzzing of Closed-source Binary Executables via Register-level Likely Invariants
Zao Yang and Stefan Nagy.
ACM International Conference on the Foundations of Software Engineering (FSE'26).
PROGnosticator: Testing Source-to-Source Code Translators via Construct-oriented Fuzzing
Yeaseen Arafat and Stefan Nagy.
ACM International Conference on the Foundations of Software Engineering (FSE'26).
TeTRIS: General-purpose Fuzzing for Translation Bugs in Source-to-Source Code Transpilers.
Yeaseen Arafat and Stefan Nagy.
Annual Computer Security Applications Conference (ACSAC'25).
GUIFuzz++: Unleashing Grey-box Fuzzing on Desktop Graphical User Interfacing Applications.
Dillon Otto, Tanner Rowlett, and Stefan Nagy.
IEEE/ACM International Conference on Automated Software Engineering (ASE'25).
Bin2Wrong: a Unified Fuzzing Framework for Uncovering Semantic Errors in Binary-to-C Decompilers.
Zao Yang and Stefan Nagy.
USENIX Annual Technical Conference (ATC'25).
No Harness, No Problem: Oracle-guided Harnessing for Auto-generating C API Fuzzing Harnesses.
Gabriel Sherman and Stefan Nagy.
International Conference on Software Engineering (ICSE'25).
A Little Goes a Long Way: Tuning Configuration Selection for Continuous Kernel Fuzzing.
Sanan Hasanov, Stefan Nagy, and Paul Gazzillo.
International Conference on Software Engineering (ICSE'25).