Many security and software testing applications require checking whether certain properties
of a program hold for any possible usage scenario. For instance, a tool for identifying …

Symbolic execution is a systematic technique for checking programs, which forms a basis for
various software testing and verification techniques. It provides a powerful analysis in …

Despite the recent improvements in automatic test case generation, handling complex data
structures as test inputs is still an open problem. Search-based approaches can generate …

We propose a novel, unified approach to the development of compositional symbolic
execution tools, bridging the gap between classical symbolic execution and compositional …

Symbolic execution is an effective technique for exploring paths in a program and reasoning
about all possible values on those paths. However, the technique still struggles with code …

We present the Java Bytecode Symbolic Executor (JBSE), a symbolic executor for Java
programs that operates on complex heap inputs. JBSE implements both the novel Heap …

Random and search-based test generators yield realistic test cases based on program APIs,
but often miss structural test objectives that depend on non-trivial data structure instances; …

Symbolic execution is a well established method for test input generation. Despite of having
achieved tremendous success over numerical domains, existing symbolic execution …

We describe DynAlloy Analyzer, a tool that extends Alloy Analyzer with support for dynamic
elements in Alloy models. The tool builds upon Alloy Analyzer in a way that makes it fully …

Safety critical standards such as DO178B/DO178C/RTCA (Radio Technical Commission for
Aeronautics) mandates coverage based testing in Aerospace applications. These standards …