Programmers frequently search for source code to reuse using keyword searches. The
search effectiveness in facilitating reuse, however, depends on the programmer's ability to …

Symbolic execution is a systematic technique for checking programs, which forms a basis for
various software testing and verification techniques. It provides a powerful analysis in …

Loops are challenging structures for program analysis, especially when loops contain
multiple paths with complex interleaving executions among these paths. In this paper, we …

In recent years, to maximize the value of software testing and analysis, we have proposed
the methodology of cooperative software testing and analysis (in short as cooperative testing …

Dynamic Symbolic Execution (DSE) is a state-of-the-art test-generation approach that
systematically explores program paths to generate high-covering tests. In DSE, the presence …

Reverse engineering of protocol message formats is critical for many security applications.
Mainstream techniques use dynamic analysis and inherit its low-coverage problem—the …

Loop acceleration can be used to prove safety, reachability, runtime bounds, and (non-)
termination of programs operating on integers. To this end, a variety of acceleration …

Analyzing loops is very important for various software engineering tasks such as bug
detection, test case generation and program optimization. However, loops are very …

Producing industry impacts has been an important, yet challenging task for the research
community. In this paper, we report experiences on successful technology transfer of Pex …

Loops are important yet most challenging program constructs to analyze for various program
analysis tasks. Existing loop analysis techniques mainly handle well loops that contain only …