Solving string constraints lazily

ASE'10 - Proceedings of the IEEE/ACM International Conference on Automated Software Engineering

Volumn , Issue , 2010, Pages 377-386

  Hooimeijer, Pieter ^a   Weimer, Westley ^a  

^a UNIVERSITY OF VIRGINIA   (United States)

Author keywords

Decision procedure; Regular language; Scalability

Indexed keywords

CLIENT APPLICATIONS; CONSTRAINT SOLVING; DECISION PROCEDURE; INPUT CONSTRAINTS; KEY ELEMENTS; ORDERS OF MAGNITUDE; PROGRAM ANALYSIS; REGULAR LANGUAGES; SATISFYING ASSIGNMENTS; SEARCH SPACES; STRING ANALYSIS; TESTING FRAMEWORK;

ALGORITHMS; AUTOMATA THEORY; FORMAL LANGUAGES; SOFTWARE ENGINEERING;

SCALABILITY;

EID: 78649793709     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1858996.1859080     Document Type: Conference Paper

References (34)

1. Roland Axelsson, Keijo Heljanko, and Martin Lange. Analyzing context-free grammars using an incremental sat solver. In International colloquium on Automata, Languages and Programming, pages 410-422, 2008.
2. Aske Simon Christensen, Anders Møller, and Michael I. Schwartzbach. Precise analysis of string expressions. In International Symposium on Static Analysis, pages 1-18, 2003.
3. Leonardo Mendonça de Moura and Nikolaj Bjørner. Z3: An efficient SMT solver. In Tools and Algorithms for the Construction and Analysis of Systems, 2008.
4. David Detlefs, Greg Nelson, and James B. Saxe. Simplify: a theorem prover for program checking. J. ACM, 52(3):365-473, 2005.
5. Niklas Eén and Niklas Sörensson. An extensible sat-solver. In Theory and Applications of Satisfiability Testing, pages 502-518, 2003.
6. Vijay Ganesh and David L. Dill. A decision procedure for bit-vectors and arrays. In Computer-Aided Verification, pages 519-531, 2007.
7. Patrice Godefroid, Adam Kiezun, and Michael Y. Levin. Grammar-based whitebox fuzzing. In Programming Language Design and Implementation, June 9-11, 2008.
8. Patrice Godefroid, Nils Klarlund, and Koushik Sen. DART: directed automated random testing. In Programming Language Design and Implementation, 2005.
9. Patrice Godefroid, Michael Levin, and David Molnar. Automated whitebox fuzz testing. In Network Distributed Security Symposium, 2008.
10. Pieter Hooimeijer and Westley Weimer. A decision procedure for subset constraints over regular languages. In Programming Languages Design and Implementation, pages 188-198, 2009.
11. Lucian Ilie and Sheng Yu. Follow automata. Inf. Comput., 186(1):140-162, 2003.
12. Adam Kieżun, Vijay Ganesh, Philip J. Guo, Pieter Hooimeijer, and Michael D. Ernst. Hampi: a solver for string constraints. In International symposium on Software testing and analysis, pages 105-116, 2009.
13. Michal Kunc. The power of commuting with finite sets of words. Theory Comput. Syst., 40(4):521-551, 2007.
14. Michal Kunc. What do we know about language equations? In Developments in Language Theory, pages 23-27, 2007.
15. K. Lakhotia, P. McMinn, and M. Harman. Handling dynamic data structures in search based testing. In Proceedings of the Genetic and Evolutionary Computation Conference, pages 1759-1766, July 2008.
16. K. Lakhotia, P. McMinn, and M. Harman. Automated test data generation for coverage: Haven't we solved this problem yet? In Testing Academia and Industry Conference, pages 95-104, September 2009.
17. Nuo Li, Tao Xie, Nikolai Tillmann, Jonathan de Halleux, and Wolfram Schulte. Reggae: Automated test generation for programs using complex regular expressions. In Automated Software Engineering Short Paper, November 2009.
18. Rupak Majumdar and Koushik Sen. Hybrid concolic testing. In International Conference on Software Engineering, pages 416-426, 2007.
19. Rupak Majumdar and Ru-Gang Xu. Directed test generation using symbolic grammars. In Automated Software Engineering, pages 134-143, 2007.
20. Yasuhiko Minamide. Static approximation of dynamically generated web pages. In International Conference on the World Wide Web, pages 432-441, 2005.
21. Matthew W. Moskewicz, Conor F. Madigan, Ying Zhao, Lintao Zhang, and Sharad Malik. Chaff: Engineering an efficient sat solver. In Design Automation Conference, pages 530-535, 2001.
22. MSDN. .net reference: Regular expression language elements. http://msdn.microsoft.com/en-us/library/az24scfc(VS.71).aspx Technical report, 2001.
23. George C. Necula. Proof-carrying code. In Principles of Programming Languages, pages 106-119, 1997.
24. Robert Nieuwenhuis, Albert Oliveras, and Cesare Tinelli. Solving sat and sat modulo theories: From an abstract davis-putnam-logemann-loveland procedure to dpll(t). J. ACM, 53(6):937-977, 2006.
25. Michael Sipser. Introduction to the Theory of Computation. Second edition. 1997.
26. Zhendong Su and Gary Wassermann. The essence of command injection attacks in web applications. In Principles of Programming Languages, pages 372-382, 2006.
27. Margus Veanes, Nikolaj Bjørner, and Leonardo de Moura. Solving extended regular constraints symbolically. Technical report, MSR, December 2009.
28. Margus Veanes, Peli de Halleux, and Nikolai Tillmann. Rex: Symbolic regular expression explorer. Technical report, MSR, October 2009.
29. Gary Wassermann and Zhendong Su. Sound and precise analysis of web applications for injection vulnerabilities. In Programming Language Design and Implementation, pages 32-41, 2007.
30. Gary Wassermann and Zhendong Su. Static detection of cross-site scripting vulnerabilities. In International Conference on Software Engineering, 2008.
31. Westley Weimer, ThanhVu Nguyen, Claire Le Goues, and Stephanie Forrest. Automatically finding patches using genetic programming. In International Conference on Software Engineering, pages 364-374, 2009.
32. Y. Xie and Alex Aiken. Static detection of security vulnerabilities in scripting languages. In Usenix Security Symposium, pages 179-192, July 2006.
33. Yichen Xie and Alexander Aiken. Saturn: A SAT-based tool for bug detection. In Computer Aided Verification, pages 139-143, 2005.
34. Fang Yu, Tevfik Bultan, and Oscar H. Ibarra. Symbolic string verification: Combining string analysis and size analysis. In Tools and Algorithms for the Construction and Analysis of Systems, 2009.