An LLM-guided KLEE searcher that steers paths toward marked vulnerable code and exits unmarked loops found 87 unique sanitizer-confirmed violations across 11 programs, ahead of 13 baselines.
Title resolution pending
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.SE 1years
2026 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Directed Symbolic Execution for Vulnerability Discovery: An LLM-Guided Approach in KLEE
An LLM-guided KLEE searcher that steers paths toward marked vulnerable code and exits unmarked loops found 87 unique sanitizer-confirmed violations across 11 programs, ahead of 13 baselines.