一句话:提出切分式符号执行,通过切分/裁剪缓解路径爆炸与约束求解限制,以到达更深代码。
符号执行能够系统性地探索程序的多个执行路径,是强大的程序分析技术;但受路径爆炸问题和约束求解能力限制,它常常难以到达代码的深层部分。论文提出 Chopped symbolic execution(切分式符号执行),从标题看其核心思想是对符号执行过程进行切分或裁剪,以聚焦相关路径并缓解上述瓶颈。给定摘要仅阐述了问题背景,未给出具体方法细节、评估基准或实验结果。
Symbolic execution is a powerful program analysis technique that systematically explores multiple program paths. However, despite important technical advances, symbolic execution often struggles to reach deep parts of the code due to the well-known path explosion problem and constraint solving limitations.
DOI 原文 ·
@inproceedings{paperbot4516,
title = {Chopped symbolic execution},
author = {David Trabish and Andrea Mattavelli and Noam Rinetzky and Cristian Cadar},
booktitle = {ICSE},
year = {2018},
doi = {10.1145/3180155.3180251}
}