Many security and software testing applications require checking whether certain properties
of a program hold for any possible usage scenario. For instance, a tool for identifying …

We present tracer, a verifier for safety properties of sequential C programs. It is based on
symbolic execution (se) and its unique features are in how it makes se finite in presence of …

The main idea behind Bubaak is to run multiple program analyses in parallel and use
runtime monitoring and enforcement to observe and control their progress in real time. The …

Concolic testing has been very successful in automatically generating test inputs for
programs. However one of its major limitations is path-explosion that limits the generation of …

We present a method for automatically generating verification conditions for a class of
imperative programs and safety properties. Our method is parametric with respect to the …

Dynamic Symbolic Execution (DSE) is a state-of-the-art test-generation approach that
systematically explores program paths to generate high-covering tests. In DSE, the presence …

Symbolic execution is emerging as a powerful technique for generating test inputs
systematically to achieve exhaustive path coverage of a bounded depth. However, its …

Dynamic Symbolic Execution (DSE) is an important method for testing of programs. An
important system on DSE is KLEE [1] which inputs a C/C++ program annotated with …

We address the problem of verifying the satisfiability of Constrained Horn Clauses (CHCs)
based on theories of inductively defined data structures, such as lists and trees. We propose …

Symbolic execution, a standard technique in program analysis, is a particularly successful
and popular component in systems for test-case generation. One of the open research …