Many security and software testing applications require checking whether certain properties
of a program hold for any possible usage scenario. For instance, a tool for identifying …

About a decade after the initial proposal to use model checkers for the generation of test
cases we take a look at the results in this field of research. Model checkers are formal …

Concolic testing combines program execution and symbolic analysis to explore the
execution paths of a software program. In this paper, we develop the first concolic testing …

We present a new symbolic execution tool, KLEE, capable of automatically generating tests
that achieve high coverage on a diverse set of complex and environmentally-intensive …

Not all bugs lead to program crashes, and not always is there a formal specification to check
the correctness of a software test's outcome. A common scenario in software testing is …

We present a new tool, named DART, for automatically testing software that combines three
main techniques:(1) automated extraction of the interface of a program with its external …

In unit testing, a program is decomposed into units which are collections of functions. A part
of unit can be tested by generating inputs for a single entry function. The entry function may …

We consider the following clustering problem: we have a complete graph on n vertices
(items), where each edge (u, v) is labeled either+ or− depending on whether u and v have …

We present a technique that improves random test generation by incorporating feedback
obtained from executing test inputs as they are created. Our technique builds inputs …

Research on software testing produces many innovative automated techniques, but
because software testing is by necessity incomplete and approximate, any new technique …