research

A decade of research

I work on program analysis and its application to software security and maintainability. Over ~40 papers and 3,800+ citations, a few threads recur — here is the map, the awarded work, and the service that comes with it.

41peer-reviewed papers
3,800+citations
7award-winning papers
themes

What I study

  1. Program analysis at scale

    Static and dynamic analysis of large codebases — ASTs, call graphs, and reachability — and the tooling that makes it practical, from Spoon to docker-parfum.

  2. Software supply-chain security

    Reachability-based dependency analysis and debloating, plus studies of real-world risk: the container attack surface and a post-mortem of the xz Utils backdoor.

  3. AI & software engineering

    The security risks and reliability of LLM-generated code, and how the quality of AI-assisted developer tools should be measured and improved.

  4. Automatic program repair

    Generating and assessing patches — including at runtime, in production, and without a reproducing test case (Nopol, NPEFix, Itzal).

  5. Empirical software engineering

    Large-scale studies of CI/CD, smart-contract analysis (47k contracts), and repair tools (2,141 bugs), together with the datasets and frameworks that enable them.

  6. Software sustainability

    Measuring and debugging the energy consumption of software across platforms with reproducible instrumentation (EnergiBridge).

selected

Award-winning papers

  1. Unveiling the Energy Vampires: A Methodology for Debugging Software Energy Consumption ★ Best Paper

    2025
    47th International Conference on Software Engineering (ICSE 2025)

  2. A Longitudinal Analysis of Bloated Java Dependencies ★ Best Paper

    2021
    ESEC/FSE 2021

  3. DUETS: A Dataset of Reproducible Pairs of Java Library-Clients ★ Best Paper

    2021
    18th International Conference on Mining Software Repositories (MSR 2021)

  4. Empirical Review of Java Program Repair Tools: A Large-Scale Experiment on 2,141 Bugs and 23,551 Repair Attempts ★ Distinguished Paper

    2019
    ESEC/FSE 2019

  5. A Comprehensive Study of Automatic Program Repair on the QuixBugs Benchmark ★ Best Paper

    2019
    International Workshop on Intelligent Bug Fixing (IBF@SANER 2019)

  6. Fully Automated HTML and Javascript Rewriting for Constructing a Self-healing Web Proxy ★ Best Paper nominee

    2018
    29th IEEE International Symposium on Software Reliability Engineering (ISSRE 2018)

  7. Towards an Automated Approach for Bug Fix Pattern Detection ★ Best Paper

    2018
    VI Workshop on Software Visualization, Evolution and Maintenance (VEM 2018)

all writing

recognition

  1. Distinguished Reviewer Award — MSR 2023

    2023

  2. Excellence in Reviewing — Journal of Computer Languages

    2020

  3. Runner-up, Best PhD Thesis — GDR GPL (French SE research group)

    2018
service
Program committees
ASEMSRICSTSANERAPRENIAC
Journal reviewing
IEEE TSEEMSEJ. Computer Languages
phd thesis

From Runtime Failures to Patches: Study of Patch Generation in Production

Advisors: Martin Monperrus & Lionel Seinturier · Defended 25 September 2018 · INRIA Lille / University of Lille / Microsoft Research.

Thesis (PDF) · Defense slides