Filters








185,612 Hits in 3.7 sec

Differential symbolic execution

Suzette Person, Matthew B. Dwyer, Sebastian Elbaum, Corina S. Pǎsǎreanu
2008 Proceedings of the 16th ACM SIGSOFT International Symposium on Foundations of software engineering - SIGSOFT '08/FSE-16  
This technique, differential symbolic execution (DSE), exploits program version similarities to improve the quality of change information and reduce analysis cost.  ...  In this dissertation, we present a novel extension and application of symbolic execution techniques that computes a precise behavioral characterization of program changes.  ...  In differential symbolic execution, Figure 4 . 3 : 43 Differential symbolic execution beginning with the common code sequence abstract summaries are incorporated into lazy symbolic execution when a common  ... 
doi:10.1145/1453101.1453131 dblp:conf/sigsoft/PersonDEP08 fatcat:widwmlun45cijnnipprniqwfaa

Coupled Relational Symbolic Execution for Differential Privacy [article]

Gian Pietro Farina, Stephen Chong, Marco Gaboardi
2020 arXiv   pre-print
Here we use symbolic execution to support these tasks specifically for differential privacy.  ...  In this work we propose a technique based on symbolic execution for reasoning about differential privacy.  ...  Motivated by this picture, we propose a new technique based on relational symbolic execution, named Coupled Relational Symbolic Execution (CRSE), which supports proving and finding violation to differential  ... 
arXiv:2007.12987v1 fatcat:grwcsfz27ndadisixut42meg4a

Safe Neurosymbolic Learning with Differentiable Symbolic Execution [article]

Chenxi Yang, Swarat Chaudhuri
2022 arXiv   pre-print
Our approach to this problem, Differentiable Symbolic Execution (DSE), samples control flow paths in a program, symbolically constructs worst-case "safety losses" along these paths, and backpropagates  ...  We study the problem of learning worst-case-safe parameters for programs that use neural networks as well as symbolic, human-written code.  ...  DIFFERENTIATING THROUGH A SYMBOLIC EXECUTOR Background on Symbolic Execution.  ... 
arXiv:2203.07671v1 fatcat:lwjhnam7kratxmmtbvwkhmx65u

Coupled Relational Symbolic Execution for Differential Privacy [chapter]

Gian Pietro Farina, Stephen Chong, Marco Gaboardi
2021 Lecture Notes in Computer Science  
symbolic execution for reasoning about differential privacy.  ...  Here we use symbolic execution to support these tasks specifically for differential privacy.  ...  By using symbolic execution we are able to reason about symbolic values, and so consider -differential privacy for any finite .  ... 
doi:10.1007/978-3-030-72019-3_8 fatcat:heritsggnzbdnoeliyetibffbq

Automatic testing of symbolic execution engines via program generation and differential testing

Timotej Kapus, Cristian Cadar
2017 2017 32nd IEEE/ACM International Conference on Automated Software Engineering (ASE)  
When combined with existing program generation techniques and appropriate oracles, this approach enables differential testing within a single symbolic execution engine.  ...  In this paper, we present our experience extending compiler testing techniques to find errors in both the concrete and symbolic execution components of symbolic execution engines.  ...  Therefore, instead of performing differential testing between different symbolic execution engines, we crosschecked native and symbolic execution versions of the same program, with the symbolic execution  ... 
doi:10.1109/ase.2017.8115669 dblp:conf/kbse/KapusC17 fatcat:xq7suq3zqnbytiztwd3w7jozlm

HyDiff

Yannic Noller, Corina S. Păsăreanu, Marcel Böhme, Youcheng Sun, Hoang Lam Nguyen, Lars Grunske
2020 Proceedings of the ACM/IEEE 42nd International Conference on Software Engineering  
Differential Symbolic Execution HyDiff's differential symbolic execution (DSE) component runs in two modes: concolically, which can incorporate inputs from the fuzzer, but also purely symbolically, being  ...  Therefore, differential fuzzing has to execute the inputs from differential symbolic execution to see whether they improve any of the differential metrics.  ... 
doi:10.1145/3377811.3380363 dblp:conf/icse/NollerPBSNG20 fatcat:w3qp2ehznvdyzp53hir4h3rola

Experimental Comparison of Concolic and Random Testing for Java Card Applets [chapter]

Kari Kähkönen, Roland Kindermann, Keijo Heljanko, Ilkka Niemelä
2010 Lecture Notes in Computer Science  
Concolic testing is a method for test input generation where a given program is executed both concretely and symbolically at the same time.  ...  In particular, we focus on the problem of differential testing, where a Java class implementation is tested against a reference implementation.  ...  To make symbolic execution possible, it is necessary to know for each variable the associated symbolic expression during execution.  ... 
doi:10.1007/978-3-642-16164-3_3 fatcat:haiqnszbkvaz7nhao33l42y2gu

Concurrency debugging with differential schedule projections

Nuno Machado, Brandon Lucia, Luís Rodrigues
2015 Proceedings of the 36th ACM SIGPLAN Conference on Programming Language Design and Implementation - PLDI 2015  
We present Symbiosis: a concurrency debugging technique based on novel differential schedule projections (DSPs).  ...  To build a DSP, Symbiosis first generates a full, failing, multithreaded schedule via thread path profiling and symbolic constraint solving.  ...  Symbolic Execution. Symbolic execution [25] explores the space of possible executions of a program by emulating or directly executing its statements.  ... 
doi:10.1145/2737924.2737973 dblp:conf/pldi/MachadoLR15 fatcat:khxih52pwzaczmoxygsp4ted7a

Concurrency debugging with differential schedule projections

Nuno Machado, Brandon Lucia, Luís Rodrigues
2015 SIGPLAN notices  
We present Symbiosis: a concurrency debugging technique based on novel differential schedule projections (DSPs).  ...  To build a DSP, Symbiosis first generates a full, failing, multithreaded schedule via thread path profiling and symbolic constraint solving.  ...  Symbolic Execution. Symbolic execution [25] explores the space of possible executions of a program by emulating or directly executing its statements.  ... 
doi:10.1145/2813885.2737973 fatcat:mihkcwn43vckrbqd5kfc5oxqmy

Qualitative Simulation of Hybrid Systems with an Application to SysML Models

Slim Medimegh, Jean-Yves Pierron, Frédéric Boulanger
2018 Proceedings of the 6th International Conference on Model-Driven Engineering and Software Development  
This model is implemented in the Diversity symbolic execution engine to build the qualitative behaviors of the system.  ...  We present here a symbolic execution model for the qualitative simulation of hybrid systems, which consists in computing only qualities of the behavior.  ...  The Diversity execution engine redefines symbolic execution for STGAs by assigning symbolic values to variables instead of numerical ones, and yields symbolic states named execution contexts.  ... 
doi:10.5220/0006535202790286 dblp:conf/modelsward/MedimeghPB18 fatcat:nokj3a7d7vfc3idcgw7u7mfgne

Testing Differential Privacy with Dual Interpreters [article]

Hengchu Zhang, Edo Roth, Andreas Haeberlen, Benjamin C. Pierce, Aaron Roth
2020 arXiv   pre-print
We propose here a fully automated framework for testing differential privacy, adapting a well-known "pointwise" technique from informal proofs of differential privacy.  ...  Applying differential privacy at scale requires convenient ways to check that programs computing with sensitive data appropriately preserve privacy.  ...  and symbolic execution.  ... 
arXiv:2010.04126v1 fatcat:gefyg52w6ffonamm7frwetwtau

Automatically Locating ARM Instructions Deviation between Real Devices and CPU Emulators [article]

Muhui Jiang, Tianyi Xu, Yajin Zhou, Yufeng Hu, Ming Zhong, Lei Wu, Xiapu Luo, Kui Ren
2021 arXiv   pre-print
Based on the specification, we propose a test case generator by designing and implementing the first symbolic execution engine for ARM architecture specification language (ASL).  ...  We generate 2,774,649 representative instruction streams and conduct differential testing with these instruction streams between four ARM real devices in different architecture versions (i.e., ARMv5, ARMv6  ...  The ASL code executes based on the concrete values of the encoding symbols.  ... 
arXiv:2105.14273v2 fatcat:7apz3eyr5vf2jip4pk5a67ehhq

Shadow symbolic execution for better testing of evolving software

Cristian Cadar, Hristina Palikareva
2014 Companion Proceedings of the 36th International Conference on Software Engineering - ICSE Companion 2014  
In this idea paper, we propose a novel way for improving the testing of program changes via symbolic execution.  ...  At a high-level, our technique runs two different program versions in the same symbolic execution instance, with the old version effectively shadowing the new one.  ...  Differential symbolic execution [21] is a general framework that can reason about program differences, but its reliance on summaries raises significant scalability issues.  ... 
doi:10.1145/2591062.2591104 dblp:conf/icse/CadarP14 fatcat:iptry2xusrbevayqlzojz3weqy

Practical Differential Profiling [chapter]

Martin Schulz, Bronis R. de Supinski
2007 Lecture Notes in Computer Science  
In this work we present eGprof, a tool that facilitates these comparisons through differential profiling inside gprof.  ...  Along with the design of this tool, we present several case studies that show how eGprof can be used to find and to study the differences of two application executions quickly and hence can aid the user  ...  The resulting binary then produces a gmon.out file containing the execution profile. gprof reads this profile along with the symbol information contained in the binary itself and produces both an execution  ... 
doi:10.1007/978-3-540-74466-5_12 fatcat:57vyw7jtuff2ndi3fv36yaxqwi

Production-guided concurrency debugging

Nuno Machado, Brandon Lucia, Luís Rodrigues
2016 Proceedings of the 21st ACM SIGPLAN Symposium on Principles and Practice of Parallel Programming - PPoPP '16  
Production-guided search helps cope with the large execution search space by targeting failing executions that are similar to observed non-failing executions.  ...  By leveraging this information from production runs, Cortex synthesizes executions to guide the search for failing schedules.  ...  As referred in Section 2.2, Cortex and Symbiosis leverage several similar techniques, namely guided symbolic execution, SMT constraint solving, and differential analysis to isolate bugs.  ... 
doi:10.1145/2851141.2851149 dblp:conf/ppopp/MachadoLR16 fatcat:2ko5kv2jcvcaxkmxbf4dlar2lq
« Previous Showing results 1 — 15 out of 185,612 results