2025W

• AI Programming / 194.193 / VU
• Bachelor Thesis / 188.919 / PR
• Project in Computer Science 1 / 194.145 / PR
• Scientific Research and Writing / 193.052 / SE
• Seminar for Master Students in Software Engineering / 180.777 / SE

2026S

• Bachelor Thesis / 188.919 / PR
• Orientation Bachelor with Honors of Informatics and Business Informatics / 180.767 / SE
• Project in Computer Science 1 / 194.145 / PR
• Project in Computer Science 2 / 194.146 / PR
• Seminar for Master Students in Software Engineering (Software Engineering and Programming) / 180.008 / SE
• Web Engineering / 194.161 / VU

• Securing Agentic AI in Software Engineering Tasks: Attack Surfaces, Threat Models, and Defenses
  2026 – 2027 / Austrian Exchange Service (OeAD)
• Types4Strings: Types for Strings
  2024 – 2027 / Austrian Science Fund (FWF)
  Publication: 221009
• Cloud Open Source Research Mobility Network
  2023 – 2026 / European Commission
  Publication: 226229
• EFFECTIVE CONSTRUCTION OF PROBABILISTIC HYBRID SEMI-PARAMETRIC MODELS FOR MODEL-BASED CONDITION MONITORING AND ACCELERATED MATERIAL DESIGN
  2022 – 2027 / Austrian Research Promotion Agency (FFG)
• Software Assistants for Probabilistic Programming
  2022 – 2026 / Meta Platforms, Inc.

• Static Factorisation of Probabilistic Programs with User-Labelled Sample Statements and While Loops / Böck, M., & Cito, J. (2026). Static Factorisation of Probabilistic Programs with User-Labelled Sample Statements and While Loops. Proceedings of the ACM on Programming Languages, 10(OOPSLA1), 653–680. https://doi.org/10.1145/3798223
• Profile Coverage: Using Android Compilation Profiles to Evaluate Dynamic Testing / Bleier, J., Kehrer, F., Cito, J., & Lindorfer, M. (2025). Profile Coverage: Using Android Compilation Profiles to Evaluate Dynamic Testing. In ASE 2025 : 2025 40th IEEE/ACM International Conference on Automated Software Engineering (pp. 906–918). IEEE. https://doi.org/10.34726/11832
  Download: PDF (884 KB)
  Projects: Cloudstars (2023–2026) / IoTIO (2020–2025) / SFB SPyCoDe (2023–2030) / W4MP (2023–2027)
• Static inference of regular grammars for ad hoc parsers / Schröder, M., & Cito, J. (2025). Static inference of regular grammars for ad hoc parsers. Proceedings of the ACM on Programming Languages, 9(OOPSLA2), 276:1-276:31. https://doi.org/10.1145/3763054
  Download: PDF (913 KB)
  Project: Types4Strings (2024–2027)
• Can LLMs Hack Enterprise Networks? Autonomous Assumed Breach Penetration-Testing Active Directory Networks / Happe, A., & Cito, J. (2025). Can LLMs Hack Enterprise Networks? Autonomous Assumed Breach Penetration-Testing Active Directory Networks. ACM Transactions on Software Engineering and Methodology. https://doi.org/10.1145/3766895
• The Road to Hybrid Quantum Programs: Characterizing the Evolution from Classical to Hybrid Quantum Software / De Maio, V., Brandic, I., Deelman, E., & Cito, J. (2025). The Road to Hybrid Quantum Programs: Characterizing the Evolution from Classical to Hybrid Quantum Software. In J. Li (Ed.), FSE Companion ’25: Proceedings of the 33rd ACM International Conference on the Foundations of Software Engineering (pp. 1721–1731). ACM. https://doi.org/10.1145/3696630.3731623
• The Road to Hybrid Quantum Programs: Characterizing the Evolution from Classical to Hybrid Quantum Software / De Maio, V., Brandic, I., Deelman, E., & Cito, J. (2025). The Road to Hybrid Quantum Programs: Characterizing the Evolution from Classical to Hybrid Quantum Software. arXiv. https://doi.org/10.48550/arXiv.2503.11450
• Language-Agnostic Static Analysis of Probabilistic Programs / Böck, M., Schröder, M., & Cito, J. (2024). Language-Agnostic Static Analysis of Probabilistic Programs. In ASE ’24: Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering (pp. 78–90). Association for Computing Machinery. https://doi.org/10.1145/3691620.3695031
• Getting pwn’d by AI: Penetration Testing with Large Language Models / Happe, A., & Jürgen, C. (2023). Getting pwn’d by AI: Penetration Testing with Large Language Models. In ESEC/FSE 2023: Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (pp. 2082–2086). Association for Computing Machinery. https://doi.org/10.1145/3611643.3613083
• Understanding Hackers’ Work: An Empirical Study of Offensive Security Practitioners / Happe, A., & Cito, J. (2023). Understanding Hackers’ Work: An Empirical Study of Offensive Security Practitioners. In ESEC/FSE 2023: Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (pp. 1669–1680). Association for Computing Machinery. https://doi.org/10.1145/3611643.3613900
• Connecting the .dotfiles: Checked-In Secret Exposure with Extra (Lateral Movement) Steps / Jungwirth, G., Saha, A., Schröder, M., Fiebig, T., Lindorfer, M., & Cito, J. (2023). Connecting the .dotfiles: Checked-In Secret Exposure with Extra (Lateral Movement) Steps. In IEEE/ACM 20th International Conference on Mining Software Repositories (MSR) (pp. 322–333). https://doi.org/10.1109/MSR59073.2023.00051
  Project: IoTIO (2020–2025)
• Performance Prediction From Source Code Is Task and Domain Specific / Böck, M., Habchi, S., Nayrolles, M., & Cito, J. (2023). Performance Prediction From Source Code Is Task and Domain Specific. In 2023 IEEE/ACM 31st International Conference on Program Comprehension (ICPC) (pp. 35–42). IEEE. https://doi.org/10.1109/ICPC58990.2023.00015
• Grammars for Free: Toward Grammar Inference for Ad Hoc Parsers / Schröder, M., & Cito, J. (2022). Grammars for Free: Toward Grammar Inference for Ad Hoc Parsers. In Proceedings of the ACM/IEEE 44th International Conference on Software Engineering: New Ideas and Emerging Results (pp. 41–45). Association for Computing Machinery. https://doi.org/10.1145/3510455.3512787
• An Empirical Investigation of Command-Line Customization / Schröder, M., & Cito, J. (2022). An Empirical Investigation of Command-Line Customization. Empirical Software Engineering, 27(2), Article 30. https://doi.org/10.1007/s10664-021-10036-y
  Download: PDF (1.85 MB)
• Learning CI Configuration Correctness for Early Build Feedback / Santolucito, M., Zhang, J., Zhai, E., Cito, J., & Piskac, R. (2022). Learning CI Configuration Correctness for Early Build Feedback. In Proceedings 2022 IEEE International Conference on Software Analysis, Evolution and Reengineering (pp. 1006–1017). IEEE. https://doi.org/10.1109/SANER53432.2022.00118
• Explaining mispredictions of machine learning models using rule induction / Cito, J., Dillig, I., Kim, S., Murali, V., & Chandra, S. (2021). Explaining mispredictions of machine learning models using rule induction. In D. Spinellis, G. Gousios, M. Chechik, & M. Di Penta (Eds.), ESEC/FSE ’21: Proceedings of the 29th ACM Joint Meeting European Software Engineering Conference and Symposium on the Foundations of Software Engineering (pp. 716–727). Association for Computing Machinery, Inc. https://doi.org/10.1145/3468264.3468614
• Doing More with Less: Characterizing Dataset Downsampling for AutoML / Zogaj, F., Cambronero, J. P., Rinard, M. C., & Cito, J. (2021). Doing More with Less: Characterizing Dataset Downsampling for AutoML. Proceedings of the VLDB Endowment, 14(11), 2059–2072. https://doi.org/10.14778/3476249.3476262
• Enabling Collaborative Data Science Development with the Ballet Framework / Smith, M. J., Cito, J., Lu, K., & Veeramachaneni, K. (2021). Enabling Collaborative Data Science Development with the Ballet Framework. In J. Nichols (Ed.), Proceedings of the ACM on Human-Computer Interaction (pp. 1–39). Acm Dl. https://doi.org/10.1145/3479575
• An Empirical Study on the Impact of Deimplicitization on Comprehension in Programs Using Application Frameworks / Cito, J., Shen, J., & Rinard, M. (2020). An Empirical Study on the Impact of Deimplicitization on Comprehension in Programs Using Application Frameworks. In Proceedings of the 17th International Conference on Mining Software Repositories. 17th International Conference on Mining Software Repositories (MSR ’20), Seoul, Korea (the Republic of). ACM Digital Library. https://doi.org/10.1145/3379597.3387507
• AMS: generating AutoML search spaces from weak specifications / Cambronero, J. P., Cito, J., & Rinard, M. C. (2020). AMS: generating AutoML search spaces from weak specifications. In Proceedings of the 28th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering. 28th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering (ESEC/FSE 2020), United States of America (the). ACM Digital Library. https://doi.org/10.1145/3368089.3409700
• Unified Configuration Setting Access in Configuration Management Systems / Raab, M., Denner, B., Hahnenberg, S., & Cito, J. (2020). Unified Configuration Setting Access in Configuration Management Systems. In Proceedings of the 28th International Conference on Program Comprehension. 28th International Conference on Program Comprehension (ICPC ’20), Seoul, Korea (the Republic of). ACM Digital Library. https://doi.org/10.1145/3387904.3389257
• Characterizing Efficiency Optimizations in Solidity Smart Contracts / Brandstätter, T., Schulte, S., Cito, J., & Borkowski, M. (2020). Characterizing Efficiency Optimizations in Solidity Smart Contracts. In 2020 IEEE International Conference on Blockchain (Blockchain). 3rd IEEE International Conference on Blockchain (Blockchain 2020) - Online Conference, Rhodes Island, Greece. IEEE. https://doi.org/10.1109/blockchain50366.2020.00042
  Project: CDL-BOT (2020–2022)
• Software Engineering for Infrastructure and Configuration (SEConfig) - Workshop Report / Cito, J., & Santolucito, M. (2020). Software Engineering for Infrastructure and Configuration (SEConfig) - Workshop Report. ACM SIGSOFT Software Engineering Notes, 45(2), 23–24. https://doi.org/10.1145/3385678.3385686
• Identifying Web Performance Degradations through Synthetic and Real-User Monitoring / Cito, J., Gotowka, D., Leitner, P., Pelette, R., Suljoti, D., & Dustdar, S. (2015). Identifying Web Performance Degradations through Synthetic and Real-User Monitoring. Journal of Web Engineering, 14(No. 5 & amp;6), 414–442. http://hdl.handle.net/20.500.12708/151174
• Identifying Root Causes of Web Performance Degradation Using Changepoint Analysis / Cito, J., Suljoti, D., Leitner, P., & Dustdar, S. (2014). Identifying Root Causes of Web Performance Degradation Using Changepoint Analysis. In S. Casteleyn, G. Rossi, & M. Winckler (Eds.), Web Engineering : 14th International Conference, ICWE 2014, Toulouse, France, July 1-4, 2014, Proceedings (pp. 181–199). Springer International Publishing. https://doi.org/10.1007/978-3-319-08245-5_11
• Statistical methods in managing web performance / Cito, J. (2014). Statistical methods in managing web performance [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2014.21879
  Download: PDF (2.35 MB)

2026

• Agentic Bayesian Inference Debugging / Nussbaumer, N. (2026). Agentic Bayesian Inference Debugging [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2026.137244
  Download: PDF (2.94 MB)

2025

• A11y-bench : can large language models resolve accessibility issues? / Tschoner, M. (2025). A11y-bench : can large language models resolve accessibility issues? [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.131462
  Download: PDF (1.43 MB)
• Dangerous capability evaluation of large language models for web penetration testing / Reinsperger, M. (2025). Dangerous capability evaluation of large language models for web penetration testing [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.130442
  Download: PDF (990 KB)
• Reducing token usage of software engineering agents / Hrubec, N. (2025). Reducing token usage of software engineering agents [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.136382
  Download: PDF (1.28 MB)
• An exploratory study of Ad Hoc parsers in python / Olschnögger, A. (2025). An exploratory study of Ad Hoc parsers in python [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.110265
  Download: PDF (2.24 MB)
• Predictive test selection : a replication study / Aichmann, S. (2025). Predictive test selection : a replication study [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.99964
  Download: PDF (1.11 MB)
• Mitigating runtime errors in infrastructure as code programs using static type analysis / Weichselbaum, A. (2025). Mitigating runtime errors in infrastructure as code programs using static type analysis [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.129744
  Download: PDF (1.11 MB)
• Integrating causal discovery and machine learning for enhanced financial forecasting / Schwarzinger, P. (2025). Integrating causal discovery and machine learning for enhanced financial forecasting [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.130133
  Download: PDF (1.47 MB)
• Enhancing Linux privilege escalation attack capabilities of local LLM agents / Probst, B. (2025). Enhancing Linux privilege escalation attack capabilities of local LLM agents [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.130441
  Download: PDF (1.04 MB)
• Automating software and vulnerability testing in REST APIs with large language models / Strauß, D. (2025). Automating software and vulnerability testing in REST APIs with large language models [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.130124
  Download: PDF (2.2 MB)
• CodeDetective : enabling Isolated code execution / Ilg, L. (2025). CodeDetective : enabling Isolated code execution [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.121664
  Download: PDF (1.21 MB)
• Delta debugging for CUE configurations / Bointner, M. (2025). Delta debugging for CUE configurations [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.117024
  Download: PDF (970 KB)
• Inference of regular expressions for Ad Hoc Java parsers / Hofbauer, S. (2025). Inference of regular expressions for Ad Hoc Java parsers [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.122024
  Download: PDF (676 KB)

2024

• Extending a refinement ƛ-calculus with polymorphism and data types / Hoffmann, J. (2024). Extending a refinement ƛ-calculus with polymorphism and data types [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2025.114629
  Download: PDF (913 KB)
• Characterizing counterfactual explanation search spaces / Lutnik, C. (2024). Characterizing counterfactual explanation search spaces [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2024.111855
  Download: PDF (1.66 MB)
• Enabling program analysis through provenance-preserving translation into A-Normal form / Goritschnig, M. (2024). Enabling program analysis through provenance-preserving translation into A-Normal form [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2024.106972
  Download: PDF (1.31 MB)
• Label generation for time series data / Windischbauer, J. (2024). Label generation for time series data [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2024.119801
  Download: PDF (2.76 MB)
• From infrastructure to code : generating dockerfiles from server snapshots / Ilg, M. (2024). From infrastructure to code : generating dockerfiles from server snapshots [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2024.100463
  Download: PDF (663 KB)

2023

• Injecting shared libraries with LD_PRELOAD for cyber deception / Kern, P. (2023). Injecting shared libraries with LD_PRELOAD for cyber deception [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2024.111853
  Download: PDF (1.4 MB)
• Security and privacy concerns in shared configuration repositories / Jungwirth, G. (2023). Security and privacy concerns in shared configuration repositories [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2023.94601
  Download: PDF (933 KB)
• Bayesian inference for inverse software performance problems / Fischer, F. (2023). Bayesian inference for inverse software performance problems [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2023.94660
  Download: PDF (1.86 MB)
• Session recording in configuration management environments / Irlinger, M. (2023). Session recording in configuration management environments [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2023.103926
  Download: PDF (724 KB)
• Unified framework for robust microservice communication / Allacher, A. (2023). Unified framework for robust microservice communication [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2023.113240
  Download: PDF (840 KB)
• Evaluation of a reengineering-based approach for evaluating software API usability / Hanreich, S. (2023). Evaluation of a reengineering-based approach for evaluating software API usability [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2023.110069
  Download: PDF (934 KB)

2022

• Causal discovery for metric-based root cause analysis in application performance monitoring / Siegl, S. (2022). Causal discovery for metric-based root cause analysis in application performance monitoring [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2022.97982
  Download: PDF (1.2 MB)
• Machine learning for interactive performance prediction / Böck, M. (2022). Machine learning for interactive performance prediction [Diploma Thesis, Technische Universität Wien]. reposiTUm. https://doi.org/10.34726/hss.2022.89203
  Download: PDF (2.92 MB)