Many security and software testing applications require checking whether certain properties
of a program hold for any possible usage scenario. For instance, a tool for identifying …

Symbolic PathFinder (SPF) is a software analysis tool that combines symbolic execution with
model checking for automated test case generation and error detection in Java bytecode …

We propose a novel, unified approach to the development of compositional symbolic
execution tools, bridging the gap between classical symbolic execution and compositional …

This paper presents design goals, development approaches, and applications for Slang–a
subset of the Scala programming language designed for engineering high assurance …

We introduce a segment-offset-plane memory model for symbolic execution that supports
symbolic pointers, allocations of memory blocks of symbolic sizes, and multi-writes. We …

Transformations form an important part of develo** domain specific languages, where
they are used to provide semantics for ty** and evaluation. Yet, few solutions exist for …

In previous work, we introduced zero-overhead profiling (ZOP), a technique that leverages
the electromagnetic emissions generated by the computer hardware to profile a program …

We present a generalisation of King's symbolic execution technique called compact
symbolic execution. It proceeds in two steps. First, we analyse cyclic paths in the control flow …

Symbolic execution is at the core of many techniques for program analysis and test
generation. Traditional symbolic execution of programs with numeric inputs enjoys the …

Web applications are becoming increasingly prevalent. Example applications include
collaborative text editors and drawing applications. We define full-stack JavaScript web …