Title
PG-KLEE: trading soundness for coverage
Abstract
ABSTRACTComprehensive test inputs are an essential ingredient for dynamic software analysis techniques, yet are typically impossible to obtain and maintain. Automated input generation techniques can supplant manual effort in many contexts, but they also exhibit inherent limitations in practical applications. Therefore, the best approach to input generation for a given application task necessarily entails compromise. Most symbolic execution approaches maintain soundness by sacrificing completeness. In this paper, we take the opposite approach and demonstrate PG-KLEE, an input generation tool that over-approximates program behavior to achieve complete coverage. We also summarize some empirical results that validate our claims. Our technique is detailed in an earlier paper [16], and the source code of PG-KLEE is available from [2]. Video URL: https://youtu.be/b1ajzW6YWds
Year
DOI
Venue
2020
10.1145/3377812.3382148
International Conference on Software Engineering
Keywords
DocType
ISSN
symbolic execution, input generation, program analysis
Conference
0270-5257
ISBN
Citations 
PageRank 
978-1-7281-6528-8
0
0.34
References 
Authors
12
2
Name
Order
Citations
PageRank
Richard Rutledge110.70
Alessandro Orso23550172.85