Many security and software testing applications require checking whether certain properties
of a program hold for any possible usage scenario. For instance, a tool for identifying …

Test case generation is among the most labour-intensive tasks in software testing. It also has
a strong impact on the effectiveness and efficiency of software testing. For these reasons, it …

We describe an approach to testing complex safety critical software that combines unit-level
symbolic execution and system-level concrete execution for generating test cases that …

Symbolic execution is a well-known program analysis technique which represents program
inputs with symbolic values instead of concrete, initialized, data and executes the program …

We present an approach for describing tests using non-deterministic test generation
programs. To write such programs, we introduce UDITA, a Java-based language with non …

An important goal of software testing is to achieve at least high structural coverage. To
reduce the manual efforts of producing such high-covering test inputs, testers or developers …

Symbolic execution is an effective but expensive technique for automated test generation.
Over the years, a large number of refined symbolic execution techniques have been …

As web applications become more widespread, sophisticated, and complex, automated
quality assurance techniques for such applications have grown in importance. Accurate …

We address the problem of error detection for programs that take recursive data structures
and arrays as input. Previously we proposed a combination of symbolic execution and …

To improve code coverage and flip complex program branches, hybrid fuzzers couple
fuzzing with concolic execution. Despite its benefits, this strategy inherits the inherent …