Numerical software is used in a wide variety of applications including safety-critical systems,
which have stringent correctness requirements, and whose failures have catastrophic …

Probabilistic programming systems (PP systems) allow developers to model stochastic
phenomena and perform efficient inference on the models. The number and adoption of …

KLEE is a popular dynamic symbolic execution engine, initially designed at Stanford
University and now primarily developed and maintained by the Software Reliability Group at …

State-of-the-art encrypted databases (EDBs) can be divided into two types: one that protects
the whole DBMS engine in a trusted domain, and one that protects only operators that …

Cyber-physical control systems, such as industrial control systems (ICS), are increasingly
targeted by cyberattacks. Such attacks can potentially cause tremendous damage, affect …

Floating point is widely used in software to emulate arithmetic over reals. Unfortunately,
floating point leads to rounding errors that propagate and accumulate during execution …

An effective approach to handling the theory of floating-point is to reduce it to the theory of bit-
vectors. Implementing the required encodings is complex, error prone and requires a deep …

We investigate the use of coverage-guided fuzzing as a means of proving satisfiability of
SMT formulas over finite variable domains, with specific application to floating-point …

While developers are aware of the importance of comprehensively testing patches, the large
effort involved in coming up with relevant test cases means that such testing rarely happens …

SMT solvers are fundamental tools for reasoning about constraints in practical problems like
symbolic execution and program synthesis. Faster SMT solving can improve the …