Cemal Yılmaz
E-mail : cyilmaz
sabanciuniv.edu
Education :
Ph.D. in Computer Science, University of Maryland, College Park, USA, 2005. M.S. in Computer Science, University of Maryland, College Park, USA, 2002. M.S. and B.S. in Computer Engineering and Information Science, Bilkent University, Ankara, 1999 and 1997, respectively.
Work Experience :
2008-present, Faculty Member, Faculty of Engineering and Natural Sciences, Sabancı University, Istanbul. 2005-2008, Post Doctoral Researcher, IBM T. J. Watson Research Center, NY, USA. 2001-2002, Software Engineer, Lockheed Martin Global Telecommunications, MD, USA.
Areas of Interest :
Software Engineering; Software Security; Software Quality Assurance; Software Testing; Data-Driven Dynamic Program AnalysisAwards :
- Amazon AWS Research Gift - Amazon AWS, USA 2020
Membership :
IEEEPublications :
| Article |
| Javeed, Arsalan and Yılmaz, Cemal and Savaş, Erkay (2023) "Microarchitectural side-channel threats, weaknesses and mitigations: a systematic mapping study", IEEE Access, Vol.11, 48945-48976 (SCI) |
| Azimi, Mohammad Yusaf and Elgun, Celal Cagin and Firat, Atil and Erata, Ferhat and Yılmaz, Cemal (2023) "AdapTV: a model-based test adaptation approach for end-to-end user interface testing of smart TVs", IEEE Access, Vol.11, 32095-32118 (SCI) |
| Aktaş, Ethem Utku and Yılmaz, Cemal (2022) "Using screenshot attachments in issue reports for triaging", Empirical Software Engineering, Vol.27, No.7 (SCI) |
| Mercan, Hanefi and Aytar, Atakan and Coşkun, Giray and Müstecep, Dilara and Uzer, Gülsüm and Yılmaz, Cemal (2022) "CIT-daily: a combinatorial interaction testing-based daily build process", Journal of Systems and Software, Vol.190 (SCI) |
| Mercan, Hanefi and Javeed, Arsalan and Yılmaz, Cemal (2022) "Flexible combinatorial interaction testing", IEEE Transactions on Software Engineering, Vol.48, No.3, 1030-1066 (SCI) |
| Javeed, Arsalan and Yılmaz, Cemal and Savaş, Erkay (2021) "Detector+: an approach for detecting, isolating, and preventing timing attacks", Computers and Security, Vol.110 (SCI) |
| Akyıldız, Taha Atahan and Güzgeren, Can Berk and Yılmaz, Cemal and Savaş, Erkay (2020) "MeltdownDetector: a runtime approach for detecting meltdown attacks", Future Generation Computer Systems, Vol.112, 136-147 (SCI) |
| Aktas, Ethem Utku and Yılmaz, Cemal (2020) "Automated issue assignment: results and insights from an industrial case", Empirical Software Engineering, Vol.25, No.5, 3544-3589 (SCI) |
| Ahmed, Bestoun S. and Gargantini, Angelo and Zamli, Kamal Z. and Yılmaz, Cemal and Bures, Miroslav and Szeles, Marek (2019) "Code-aware combinatorial interaction testing", IET Software, Vol.13, No.6, 600-609 (SCI) |
| Mercan, Hanefi and Yılmaz, Cemal and Kaya, Kamer (2019) "CHiP: a configurable hybrid parallel covering array constructor", IEEE Transactions on Software Engineering, Vol.45, No.12, 1270-1291 (SCI) |
| Külah, Yusuf and Dinçer, Berkay and Yılmaz, Cemal and Savaş, Erkay (2019) "SpyDetector: an approach for detecting side-channel attacks at runtime", International Journal of Information Security, Vol.18, No.4, 393-422 (SCI) |
| Koç, Uğur and Yılmaz, Cemal (2018) "Approaches for computing test-case-aware covering arrays", Software Testing, Verification and Reliability, Vol.28, No.7 (SCI) |
| Atıcı, Ali Can and Yılmaz, Cemal and Savaş, Erkay (2018) "Cache-timing attacks without a profiling phase", Turkish Journal of Electrical Engineering and Computer Sciences, Vol.26, No.4, 1953-1966 (SCI) |
| Yenigün, Hüsnü and Yılmaz, Cemal and Ulrich, Andreas (2016) "Advances in test generation for testing software and systems", International Journal on Software Tools for Technology Transfer, Vol.18, No.3, 245-249 (SCI) |
| Özçelik, Burcu and Yılmaz, Cemal (2016) "Seer: a lightweight online failure prediction approach", IEEE Transactions on Software Engineering, Vol.42, No.1, 26-46 (SCI) |
| Savaş, Erkay and Yılmaz, Cemal (2015) "A generic method for the analysis of a class of cache attacks: a case study for AES", Computer Journal, Vol.58, No.10, 2716-2737 (SCI) |
| Yılmaz, Cemal and Fouche, Sandro and Cohen, Myra B. and Porter, Adam and Demiröz, Gülşen and Koç, Uğur (2014) "Moving forward with combinatorial interaction testing", Computer, Vol.47, No.2, 37-45 (SCI) |
| Yılmaz, Cemal and Dumlu, Emine and Cohen, Myra B. and Porter, Adam (2014) "Reducing masking effects in combinatorial interaction testing: a feedback driven adaptive approach", IEEE Transactions on Software Engineering, Vol.40, No.1, 43-66 (SCI) |
| Yılmaz, Cemal (2013) "Test case-aware combinatorial interaction testing", IEEE Transactions on Software Engineering, Vol.39, No.5, 684-706 (SCI) |
| Book |
| "Technological arts preservation, Artut, Selçuk and Karaman, Osman Serhat and Yılmaz, Cemal (eds.), Istanbul: Sabancı University Sakıp Sabancı Museum, June 2021 |
| Book Section / Chapter |
| Yılmaz, Cemal, "The software aspect of preserving digital arts", Technological arts preservation, Artut, Selçuk and Karaman, Osman Serhat and Yılmaz, Cemal (eds.), Istanbul, Turkey: Sabancı University Sakıp Sabancı Museum (SSM), January 2021, 102-115 |
| Papers in Conference Proceedings |
| Durmaz, Fatih and Kamadan, Nureddin and Öz, Melih Taha and Ünal, Musa Sadık and Javeed, Arsalan and Yılmaz, Cemal and Savaş, Erkay, "TimeInspector: a static analysis approach for detecting timing attacks", IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), Institute of Electrical and Electronics Engineers, July 2023, 296-303 |
| Abdennebi, Anes and Tuncay, Alp and Yılmaz, Cemal and Koyuncu, Anıl and Gungor, Oktay, "LSTM-AE for anomaly detection on multivariate telemetry data", Song, Y. T. and Rhee, J. and Jeon, Y. (eds.), IEEE/ACIS 21st International Conference on Software Engineering Research, Management and Applications (SERA), Institute of Electrical and Electronics Engineers, May 2023, 90-97 |
| Mercan, Hanefi and Yılmaz, Cemal, "Hints in unified combinatorial interaction testing", IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW), Institute of Electrical and Electronics Engineers, April 2023, 223-227 |
| Ünal, Musa Sadık and Javeed, Arsalan and Yılmaz, Cemal and Savaş, Erkay, "HyperDetector: detecting, isolating, and mitigating timing attacks in virtualized environments", Beresford, Alastair R. and Patra, Arpita and Bellini, Emanuele (eds.), 21st International Conference on Cryptology and Network Security (CANS 2022), Springer Cham, November 2022, 188-199 |
| Coşkun, Giray and Coşkun, Cankut and Mercan, Hanefi and Yılmaz, Cemal, "Using unified combinatorial interaction testing for MC/DC coverage", IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW), Institute of Electrical and Electronics Engineers, June 2022, 57-62 |
| Firat, Atil and Azimi, Mohammad Yusaf and Elgun, Celal Cagin and Erata, Ferhat and Yılmaz, Cemal, "Model-based test adaptation for smart TVs", 3rd ACM/IEEE International Conference on Automation of Software Test, AST 2022, Institute of Electrical and Electronics Engineers, May 2022, 52-53 |
| Korkmaz, Ömer and Yılmaz, Cemal, "SYSMODIS: a systematic model discovery approach", IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW), Institute of Electrical and Electronics Engineers, April 2021, 67-76 |
| Mercan, Hanefi and Yilmaz, Cemal, "Computing sequence covering arrays using unified combinatorial interaction testing", IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW), Institute of Electrical and Electronics Engineers, April 2021, 77-80 |
| Alptekin, Halit and Demir, Simge and Şimşek, Şevval and Yılmaz, Cemal, "Towards prioritizing vulnerability testing", 20th IEEE International Conference on Software Quality, Reliability, and Security, QRS 2020, Institute of Electrical and Electronics Engineers, December 2020, 672-673 |
| Aktas, Ethem Utku and Yeniterzi, Reyyan and Yılmaz, Cemal, "Turkish issue report classification in banking domain [Bankacılık alanında Türkçe yazılım hata raporu sınıflandırması]", 28th Signal Processing and Communications Applications Conference (SIU), Institute of Electrical and Electronics Engineers, October 2020 |
| Aktaş, Ethem Utku and Yılmaz, Cemal, "An exploratory study on improving automated issue triage with attached screenshots", 42nd ACM/IEEE International Conference on Software Engineering, ICSE-Companion 2020, IEEE Computer Society, June 2020, 292-293 |
| Aktaş, Ethem Utku and Eriş, Mehtap Özaltın and Altunel, Haluk and Yılmaz, Cemal, "Yazılım hataları ile ilişkili olmayan olay kayıtlarının analizi ve sınıflandırılması: bir vaka çalışması [Analysis and classification of issue reports not related to software bugs: a case study]", Ayav, Tolga and Erten, Murat and Tekir, Selma (eds.), 13th Turkish National Software Engineering Symposium, Izmir Institute of Technology, September 2019 |
| Aktaş, Ethem Utku and Altunel, Haluk and Elalmış, Halil İbrahim and Nişancı, Songül and Yılmaz, Cemal, "Improvement of software issue record management process in an industrial context (Endüstriyel bağlamda yazılım olay kaydı yönetim sürecinin iyileştirilmesi)", Erten, M. and Tarhan, A. (eds.), 12th Turkish National Software Engineering Symposium, UYMS 2018, CEUR-WS, September 2018 |
| Mercan, Hanefi and Kaya, Kamer and Yılmaz, Cemal, "Enumerator: an efficient approach for enumerating all valid t-tuples", 11th IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW 2018), IEEE (Institute of Electrical and Electronics Engineers), July 2018, 302-305 |
| Taş, Mustafa Kemal and Mercan, Hanefi and Demiröz, Gülşen and Kaya, Kamer and Yılmaz, Cemal, "Generating cost-aware covering arrays for free", Zakharov, V. and Itsykson, V. and Scedrov, A. (eds.), 4th International Conference on Tools and Methods of Program Analysis (TMPA 2017), Springer, January 2018, 170-182 |
| Aktaş, Ethem Utku and Göktepe, Aziz and Pehlivan, Gamze and Yıldırım, Ümit Ülkem and Yılmaz, Cemal, "Olay kayıtları ürün ve platform kodu tespit süreci otomasyonu (The automation of the process of determining product and platform codes for issue records)", Turhan, C. and Yazıcı, A. and Coşkunçay, A. and Oğuztüzün, H. (eds.), 11th Turkish National Software Engineering Symposium (UYMS 2017), CEUR-WS, November 2017, 432-443 |
| Çalpur, Mehmet Çağrı and Arca, Sevgi and Çalpur, Tansu Çağla and Yılmaz, Cemal, "Makine öğrenmesi ile mobil uygulama sınıflandırılması ve otomatik keşif testi (Mobile application classification using machine learning and automated exploratory testing)", Turhan, C. and Yazıcı, A. and Coşkunçay, A. and Oğuztüzün, H. (eds.), 11th Turkish National Software Engineering Symposium (UYMS 2017), CEUR-WS, November 2017, 357-367 |
| Dönmez, M. Yunus and Demir, Özlem and Özkan, Erdinç and Samaner, Eren and Candan, Ömer Mert and Seymen, Beste and Yılmaz, Cemal, "Metin tabanlı test durumlarının kullanacağı yazılım modüllerinin tahmin edilmesi (Predicting the software modules to be exercised by test cases given in natural language)", Turhan, C. and Yazıcı, A. and Coşkunçay, A. and Oğuztüzün, H. (eds.), 11th Turkish National Software Engineering Symposium (UYMS 2017), CEUR-WS, November 2017, 321-331 |
| Çalpur, Mehmet Çağrı and Arca, Sevgi and Çalpur, Tansu Çağla and Yılmaz, Cemal, "Model dressing for automated exploratory testing", IEEE International Conference on Software Quality, Reliability and Security Companion (QRS-C 2017), IEEE (Institute of Electrical and Electronics Engineers), July 2017 |
| Mercan, Hanefi and Yılmaz, Cemal and Kaya, Kamer, "An approach for choosing the best covering array constructor to use", IEEE International Conference on Software Quality, Reliability and Security Companion (QRS-C 2017), IEEE (Institute of Electrical and Electronics Engineers), July 2017 |
| Demiröz, Gülşen and Yılmaz, Cemal, "Yazılım test maliyet fonksiyonlarının otomatik olarak keşfedilmesi", 10. Ulusal Yazılım Mühendisliği Sempozyumu (UYMS'16), Çanakkale Onsekiz Mart Üniversitesi, October 2016 |
| Mercan, Hanefi and Yılmaz, Cemal, "Birleşik kombinezon etkileşim sınama yöntemi", 10. Ulusal Yazılım Mühendisliği Sempozyumu (UYMS'16), Çanakkale Onsekiz Mart Üniversitesi, October 2016 |
| Mercan, Hanefi and Yılmaz, Cemal, "A constraint solving problem towards unified combinatorial interaction testing", Wintersteiger, C. M. and Tripp, O. (eds.), 7th Workshop on Constraint Solvers in Testing, Verification, and Analysis (CSTVA 2016), CEUR, July 2016, 24-30 |
| Çalpur, Mehmet Çağrı and Yılmaz, Cemal, "Towards having a cloud of mobile devices specialized for software testing", IEEE/ACM International Conference on Mobile Software Engineering and Systems (MobileSoft 2016), ACM (Association for Computing Machinery), May 2016, 9-10 |
| Demiröz, Gülşen and Yılmaz, Cemal, "Towards automatic cost model discovery for combinatorial interaction testing", 9th IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW), IEEE (Institute of Electrical and Electronics Engineers), April 2016, 46-50 |
| Rabiger, Stefan and Girişken, Ataman and Yılmaz, Cemal, "How to provide developers only with relevant information?", 7th IEEE International Workshop on Empirical Software Engineering in Practice (IWESEP), IEEE (Institute of Electrical and Electronics Engineers), March 2016, 12-17 |
| Javeed, Arsalan and Yılmaz, Cemal, "Combinatorial interaction testing of tangled configuration options", IEEE Eighth International Conference on Software Testing, Verification and Validation Workshops (ICSTW 2015), USA: IEEE (Institute of Electrical and Electronics Engineers), April 2015, 1-4 |
| Atıcı, Ali Can and Yılmaz, Cemal and Savaş, Erkay, "An approach for isolating the sources of information leakage exploited in cache-based side-channel attacks", IEEE 7th International Conference on Software Security and Reliability-Companion (SERE-C 2013), USA: IEEE (Institute of Electrical and Electronics Engineers), June 2013, 74-83 |
| Savaş, Erkay and Yılmaz, Cemal, "Cache attacks: an information and complexity theoretic approach", 5th International Conference on New Technologies, Mobility and Security (NTMS), USA: IEEE (Institute of Electrical and Electronics Engineers) 2012, 1-7 |
| Dumlu, Emine and Yılmaz, Cemal and Cohen, Myra B. and Porter, Adam, "Feedback driven adaptive combinatorial testing", ACM International Symposium on Software Testing and Analysis (ISSTA 2011), New York: ACM (Association for Computing Machinery), July 2011, 243-253 |
| Volumes Edited / Special Issues |
| Yenigün, Hüsnü and Yılmaz, Cemal and Ulrich, Andreas, Testing software and systems, Springer, November 2013 |
| Working Paper / Technical Report |
| Dumlu, Emine and Yılmaz, Cemal and Cohen, Mayra B. and Porter, Adam, "Geribesleme güdümlü adaptif kombinasyonel test etme yaklaşımı" 2011, Sabancı University ID:SU_FENS_2011/0006 |
| Yılmaz, Cemal, "Test-aware combinatorial interaction testing" 2011, Sabancı University ID:SU_FENS_2011/0005 |
JOURNAL AND MAGAZINE PUBLICATIONS
Cemal Yilmaz, Adam A. Porter, Arvind S. Krishna, Atif M. Memon, Douglas C. Schmidt, A. S. Gokhale, B. Natarajan, "Reliable Effects Screening: A Distributed Continuous Quality Assurance Process for Monitoring Performance Degradation in Evolving Software Systems", IEEE Transactions on Software Engineering 33(2): 124-141, 2007.
Adam Porter, Cemal Yilmaz, Atif Memon, Douglas C. Schmidt, Bala Natarajan, "Skoll: A Process and Infrastructure for Distributed Continuous Quality Assurance", IEEE Transactions on Software Engineering 33(8): 510-525, Aug. 2007.
Cemal Yilmaz, Myra Cohen, Adam Porter, "Covering Arrays for Efficient Fault Characterization in Complex Configuration Spaces", IEEE Transactions on Software Engineering 32(1): 20-34, Jan. 2006.
Adam Porter, Cemal Yilmaz, Atif M. Memon, Arvind S. Krishna, Douglas C. Schmidt, A. S. Gokhale, "Techniques and processes for improving the quality and performance of open-source software", Software Process: Improvement and Practice Journal 11(2): 163-176, 2006.
Arvind S. Krishna, Douglas C. Schmidt, Atif Memon, Adam Porter, Cemal Yilmaz, "A Distributed Continuous Quality Assurance process to Manage Variability in Performance-intensive Software", Studia Informatica Universalis 4(1), 53-72, 2005.
Arvind S. Krishna, Cemal Yilmaz, Atif Memon, Adam Porter, Douglas C. Schmidt, Aniruddha Gokhale, and Balachandran Natarajan, "Preserving Distributed System's Critical Properties: A Model-Driven Approach", IEEE Software Special Issue on the Persistent Software Attributes 21(6), 32-40, 2004.
CONFERENCE AND WORKSHOP PUBLICATIONS
Cemal Yilmaz, Amit Paradkar, and Clay Williams, "Time Will Tell: Fault Localization Using Time Spectra", Proceedings of the 30th international Conference on Software Engineering (ICSE '08), pp. 81-90, Leipzig, Germany, May 10 - 18, 2008.
Matthew Kaplan, Tim Klinger, Amit M. Paradkar, Avik Sinha, Clay Williams, Cemal Yilmaz, "Less is More: A Minimalistic Approach to UML Model-Based Conformance Test Generation," International Conference on Software Testing (ICST '08), Verification, and Validation, pp. 82-91, 2008
Cemal Yilmaz and Clay Williams, "An Automated Model-Based Debugging Approach", in Proceedings of the International Conference on Automated Software Engineering (ASE '07), pp. 174-183, Atlanta, Georgia, November 5-9, 2007.
Matthew Kaplan, Tracy Kimbrel, Kevin Mckenzie, Richard Prewitt, Maxim Sviridenko, Clay Williams and Cemal Yilmaz, "Test Machine Scheduling and Optimization for z/OS", IEEE Symposium on Computational Intelligence in Scheduling (CISched '07), pp. 27-24, Honolulu, Hawaii, April 1-5, 2007.
Cemal Yilmaz, Arvind S. Krishna, Atif Memon, Adam Porter, Douglas C. Schmidt, Aniruddha Gokhale, and Balachandran Natarajan, "Main Effects Screening: A Distributed Continuous Quality Assurance Process for Monitoring Performance Degradation in Evolving Software Systems", Proceedings of the 27th international Conference on Software engineering (ICSE '05), pp. 293-302, St. Louis, Missouri, 15-21 May, 2005.
Cemal Yilmaz, Cagatay Catal, Oya Kalipsiz and Adam Porter, "Dagitik Kalite Guvencesi", Turkish International Symposium on Software Engineering (UYMS '05), Ankara, Turkey, September, 2005.
Cemal Yilmaz, Myra Cohen, and Adam Porter, "Covering Arrays for Efficient Fault Characterization in Complex Configuration Spaces", International Symposium on Software Testing and Analysis (ISSTA '04), pp. 45-54, Boston, Massachusetts, July 11-14, 2004.
Atif Memon, Adam Porter, Cemal Yilmaz, Adithya Nagarajan, Douglas C. Schmidt, and Bala Natarajan, "Skoll: Distributed Continuous Quality Assurance", Proceedings of the 26th International Conference on Software Engineering (ICSE '04), pp. 459-468, Edinburgh, Scotland, UK, May 23-28, 2004.
Cemal Yilmaz, Arvind S. Krishna, Atif Memon, Adam Porter, Douglas C. Schmidt, Aniruddha Gokhale, and Balachandran Natarajan, "A Model-based Distributed Continuous Quality Assurance Process to Enhance the Quality of Service of Evolving Performance-intensive Software Systems", Proceedings of the ICSE Workshop on Remote Analysis and Measurement of Software Systems (RAMSS), Edinburgh, Scotland, UK, May 23-28, 2004.
Emre Turkay, Arvind S. Krishna, Aniruddha Gokhale, Douglas Schmidt, Bala Natarajan, Adam Porter, Cemal Yilmaz, Atif Memon, "Model-Driven Quality Assurance Techniques for Distributed Real-time and Embedded Systems", In Proceedings of the OMG Real-Time and Embedded Systems Workshop, July 2004.
Adam Porter, Atif Memon, and Cemal Yilmaz, Don Hinton, Arvind Krishna, and Douglas C. Schmidt, "Distributed Continuous Quality Assurance for Distributed and Real-time Systems", In Proceedings of the 4th Annual Workshop on TAO and CIAO, Alexandria, VA, July 2004.
Cemal Yilmaz, Adam Porter, and Douglas C. Schmidt, "Distributed Continuous Quality Assurance: The Skoll Project", Proceedings of the ICSE Workshop on Remote Analysis and Measurement of Software Systems (RAMSS), Portland, Oregon, May 3-10, 2003.
Frantisek Brabec, Hanan Samet, Cemal Yilmaz, "VASCO: visualizing and animating spatial constructs and operations", In Proceedings of the 19th Symposium on Computational Geometry, New York, NY, 2003.
W. Li, S. Candan, W. Hsiung, O. Po, D. Agrawal, Q. Luo, W. Huang, Y. Akca, Cemal Yilmaz, "Cache Portal: Technology for Accelerating Database-driven e-commerce Web Sites", Proceedings of the 27th International Conference on Very Large Data Bases (VLDB '01), Roma, Italy, September 11-14, 2001 (short paper).