Augmented Dynamic Symbolic Execution
by
Konrad Jamrozik, Gordon Fraser, Nikolai Tillmann, Jonathan De Halleux
Proceedings of the 27th IEEE/ACM International Conference on Automated Software Engineering, Pages 254-257, ASE 2012, ACM, New York, NY, USA, September 2012.
ISBN: 9781450312042
Digital Library via DOI: 10.1145/2351676.2351716 - Local copy: Download as PDF file.
Abstract
Dynamic symbolic execution (DSE) can efficiently explore all simple paths through a program, reliably determining whether there are any program crashes or violations of assertions or code contracts. However, if such automated oracles do not exist, the traditional approach is to present the developer a small and representative set of tests in order to let him/her determine their correctness. Customer feedback on Microsoft's Pex tool revealed that users expect different values and also more values than those produced by Pex, which threatens the applicability of DSE in a scenario without automated oracles. Indeed, even though all paths might be covered by DSE, the resulting tests are usually not sensitive enough to make a good regression test suite. In this paper, we present augmented dynamic symbolic execution, which aims to produce representative test sets by augmenting path conditions with additional conditions that enforce target criteria such as boundary or mutation adequacy, or logical coverage criteria.
BibTeX Entry
@inproceedings{jamrozik-ase-2012,
title = "Augmented Dynamic Symbolic Execution",
author = "Konrad Jamrozik and Gordon Fraser and Nikolai Tillmann and Jonathan De Halleux",
year = "2012",
month = sep,
address = "New York, NY, USA",
booktitle = "Proceedings of the 27th IEEE/ACM International Conference on Automated Software Engineering",
location = "Essen, Germany",
pages = "254--257",
publisher = "ACM",
series = "ASE 2012",
ISBN = "9781450312042",
doi = "10.1145/2351676.2351716",
}