Mixed concrete and symbolic execution is an important technique for finding and
understanding software bugs, including security-relevant ones. However, existing symbolic …

Symbolic execution is a powerful program analysis technique that systematically explores
multiple program paths. However, despite important technical advances, symbolic execution …

Many security and software testing applications require checking whether certain properties
of a program hold for any possible usage scenario. For instance, a tool for identifying …

Many recent tools use dynamic symbolic execution to perform tasks ranging from automatic
test generation, finding security flaws, equivalence verification, and exploit generation …

This paper introduces memoized symbolic execution (Memoise), a new approach for more
efficient application of forward symbolic execution, which is a well-studied technique for …

Concolic (concrete+ symbolic) execution has recently gained popularity as an effective
means to uncover non-trivial vulnerabilities in software, such as subtle buffer overflows …

Symbolic execution is a powerful technique for software analysis and bug detection.
Compilation-based symbolic execution is a recently proposed flavor that has been shown to …

Most techniques to detect program errors, such as testing, code reviews, and static program
analysis, do not fully verify all possible executions of a program. They leave executions …

Symbolic execution systematically explores program paths by solving path conditions---
formulas over symbolic variables. Typically, the symbolic variables range over numbers …

In spite of their effectiveness in the context of vulnerability discovery, current state-of-the-art
binary program analysis approaches are limited by inherent trade-offs between accuracy …