• Publications
  • Influence
Bandera: extracting finite-state models from Java source code
TLDR
The authors describe an integrated collection of program analysis and transformation components, called Bandera, that enables the automatic extraction of safe, compact finite-state models from program source code.
Generalized Symbolic Execution for Model Checking and Testing
TLDR
A source to source translation to instrument a program is defined, which enables standard model checkers to perform symbolic execution of the program, and a novel symbolic execution algorithm is given that handles dynamically allocated structures, method preconditions and concurrency.
Symbolic PathFinder: symbolic execution of Java bytecode
Symbolic Pathfinder (SPF) combines symbolic execution with model checking and constraint solving for automated test case generation and error detection in Java programs with unspecified inputs. In
Test input generation with java PathFinder
TLDR
The main contribution of this work is to show how efficient white-box test input generation can be done for code manipulating complex data, taking into account complex method preconditions.
Learning Assumptions for Compositional Verification
TLDR
This paper presents a novel framework for performing assume-guarantee reasoning in an incremental and fully automated fashion and has implemented this approach in the LTSA tool and applied it to a NASA system.
Combining unit-level symbolic execution and system-level concrete execution for testing nasa software
TLDR
Symbolic Java PathFinder is developed, a symbolic execution framework that implements a non-standard bytecode interpreter on top of the Java Pathfinder model checking tool that combines unit-level symbolic execution and system-level concrete execution for generating test cases that satisfy user-specified testing criteria.
Test input generation for java containers using state matching
TLDR
Techniques for automated test input generation of Java container classes, using state matching based techniques and random selection for generating test inputs, are described and abstract matching turns out to be a powerful approach for generatingtest inputs to obtain high predicate coverage.
JPF-SE: A Symbolic Execution Extension to Java PathFinder
TLDR
JPF-SE uses JPF to generate and explore symbolic execution paths and it uses off-the-shelf decision procedures to manipulate numeric constraints.
Symbolic PathFinder: integrating symbolic execution with model checking for Java bytecode analysis
Symbolic PathFinder (SPF) is a software analysis tool that combines symbolic execution with model checking for automated test case generation and error detection in Java bytecode programs. In SPF,
Differential symbolic execution
TLDR
A novel extension and application of symbolic execution techniques that computes a precise behavioral characterization of a program change that exploits the fact that program versions are largely similar to reduce cost and improve the quality of analysis results is introduced.
...
...