Improving symbolic execution for statechart formalisms

Authors:
Daniel Balasubramanian;Corina Păsăreanu;Michael W. Whalen;Gábor Karasi;Michael Lowry
Affiliations:
Vanderbilt University, Nashville, TN;NASA Ames Research Center, Mountain View, CA;University of Minnesota, Minneapolis, MN;Vanderbilt University, Nashville, TN;NASA Ames Research Center, Mountain View, CA
Venue:
Proceedings of the Workshop on Model-Driven Engineering, Verification and Validation
Year:
2012

Citing 8
Cited 1

Statecharts: A visual formalism for complex systems

Science of Computer Programming
Software Specialization Via Symbolic Execution

IEEE Transactions on Software Engineering
Symbolic execution and program testing

Communications of the ACM
A Comparison of Statecharts Variants

ProCoS Proceedings of the Third International Symposium Organized Jointly with the Working Group Provably Correct Systems on Formal Techniques in Real-Time and Fault-Tolerant Systems
Parallel symbolic execution for structural test generation

Proceedings of the 19th international symposium on Software testing and analysis
Symbolic PathFinder: symbolic execution of Java bytecode

Proceedings of the IEEE/ACM international conference on Automated software engineering
Polyglot: modeling and analysis for multiple Statechart formalisms

Proceedings of the 2011 International Symposium on Software Testing and Analysis
SAUML: A tool for symbolic analysis of UML-RT models

ASE '11 Proceedings of the 2011 26th IEEE/ACM International Conference on Automated Software Engineering

Polyglot: systematic analysis for multiple statechart formalisms

TACAS'13 Proceedings of the 19th international conference on Tools and Algorithms for the Construction and Analysis of Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

Symbolic execution is a program analysis technique that attempts to explore all possible paths through a program by using symbolic values rather than actual data values as inputs. When applied to Statecharts, a model-based formalism for reactive systems, symbolic execution can determine all feasible paths through a model up to a specified bound and generate input sequences exercising these paths. The main drawback of this method is its computational expense. This paper describes two efforts to improve the performance of symbolic execution within our previously developed framework for Statechart analysis. One method is a multithreaded symbolic execution engine targeted directly at our framework. A second, orthogonal, method is program specialization with respect to a particular model and Statechart semantics, which uses symbolic execution to rewrite the original code into an equivalent form that has fewer instructions and is easier to analyze.