… The remainder of the paper is structured as follows: We first review symbolic execution in
general, as well as the binaryonly flavor in particular, and existing implementations thereof (…

… In this section, we present the basics of contant-time and symbolic execution. Small examples
of CT and standard adaptations of symbolic execution are presented in Section III, while a …

… Symbolic execution is thorough but slow and often does … symbolic execution, by phrasing
the learning task in the framework of imitation learning. During learning, a symbolic execution …

… information that is crucial for applying mitigation techniques to vulnerable software. We
propose CaSym, a cache-aware symbolic execution to identify and report precise information …

… symbolic execution, a technique known concolic execution [17]. Another approach combines
the use of dynamic symbolic execution … This technique uses dynamic symbolic execution to …

… Symbolic execution is a well-known test generation method to cover program paths at the …
, we extend symbolic execution with modeling of cache and speculative execution. Our tool …

… A few symbolic execution tools (eg [3… sequences effectively, we present a novel technique
that guides symbolic execution with language models. Basically, our technique exhaustively …

… in modern implementations of symbolic execution [45]. We propose an alternative execution
method and show that it leads to considerably faster symbolic execution and ultimately to …

… by explaining the relevance of neural-symbolic extraction methods. Furthermore, our survey
is distinct from another recent survey on NSI [15] in two ways—first, that we focus specifically …

… dynamic symbolic execution—a technique that uses constraint solving to systematically
explore a program’s state space. We introduce an open-source dynamic symbolic execution …