paperbot · PL 论文追踪

全部论文 待读 收藏

P2 Fuzzing Symbolic Expressions

模糊测试符号表达式
ICSE 2021 IEEE/ACM 43rd International Conference on Software Engineering (ICSE)2021匹配度 3/10 · 论文研究混合模糊测试中符号公式可满足性的近似求解,属于程序测试/SMT/形式化方法邻近方向,但与用户画像中 LLM/Agent 与静态分析结合、浮点程序分析、贝叶斯程序分析等核心追问题没有直接交集。引用 30 inbox
Luca Borzacchiello, Emilio Coppa, Camil Demetrescu
crossref: 2026-09-12dblp: 2026-09-12arxiv: 2026-09-12

AI 速览

一句话:提出近似求解器 FUZZY-SAT,用模糊测试技术判定符号公式可满足性,作为混合模糊测试中 SMT 求解的替代与补充。

软件测试中模糊测试、符号执行与混合模糊测试广泛结合,SMT 求解器被用于推理分析中收集的符号表达式。本文研究能否将模糊测试领域的技术用于判断符号公式是否可满足,从而为 concolic 与 hybrid fuzzing 引擎提供经典 SMT 求解之外的可行替代。作者设计了近似求解器 FUZZY-SAT,并针对混合模糊器生成的查询,与 Z3 等最新求解器进行比较。结果表明,FUZZY-SAT 既具有竞争力,又与现有最先进求解器形成互补。

问题
在 concolic 与混合模糊测试中,SMT 求解器处理符号公式常成为瓶颈;本文探究能否用模糊测试技术近似判定这些公式的可满足性。
方法
设计近似求解器 FUZZY-SAT,将模糊测试思想用于符号表达式的可满足性检查,以替代或补充经典 SMT 求解。
评估
使用混合模糊器生成的查询,与 Z3 等最先进求解器进行对比,显示 FUZZY-SAT 具有竞争力且与现有求解器互补。
原文摘要(Abstract)

Recent years have witnessed a wide array of results in software testing, exploring different approaches and methodologies ranging from fuzzers to symbolic engines, with a full spectrum of instances in between such as concolic execution and hybrid fuzzing. A key ingredient of many of these tools is Satisfiability Modulo Theories (SMT) solvers, which are used to reason over symbolic expressions collected during the analysis. In this paper, we investigate whether techniques borrowed from the fuzzing domain can be applied to check whether symbolic formulas are satisfiable in the context of concolic and hybrid fuzzing engines, providing a viable alternative to classic SMT solving techniques. We devise a new approximate solver, FUZZY-SAT, and show that it is both competitive with and complementary to state-of-the-art solvers such as Z3 with respect to handling queries generated by hybrid fuzzers.

链接与引用

DOI 原文 · arXiv · PDF(开放获取) · DBLP

BibTeX
@inproceedings{abs-2102-06580,
  title = {Fuzzing Symbolic Expressions},
  author = {Luca Borzacchiello and Emilio Coppa and Camil Demetrescu},
  booktitle = {ICSE},
  year = {2021},
  doi = {10.1109/icse43902.2021.00071}
}