pith. sign in

arxiv: 2605.20310 · v1 · pith:IHQI2XY4new · submitted 2026-05-19 · 💻 cs.SE

Combined Program Analysis Techniques: A Systematic Mapping Study

Pietro Braione , Giovanni Denaro , Luca Gugliemo , Elson Kurian , Enea Raffaele Ilario Papaleo , Martino Tessaro This is my paper

Pith reviewed 2026-05-21 02:11 UTC · model grok-4.3

classification 💻 cs.SE
keywords program analysisstatic analysisdynamic analysiscombined analysissystematic mapping studytaxonomysoftware dependability
0
0 comments X

The pith

A taxonomy classifies how program analyses are combined across 248 studies to achieve synergies in precision and coverage.

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

This paper conducts a systematic mapping of literature on combining program analysis techniques such as static and dynamic analysis. The authors develop a taxonomy based on the synergistic effects sought, the workflows between analyses, and the specific interaction patterns used. They apply this taxonomy to 248 primary studies to identify common goals and design patterns in these combinations. A sympathetic reader would care because individual analysis methods have limitations, and understanding effective ways to combine them can lead to more powerful tools for ensuring software dependability.

Core claim

Our taxonomy and literature mapping reveal the commonalities and the differences, in terms of goals and patterns, in the design of combined-program-analysis techniques. Thereby we provide a framework of concepts that can foster the ability of researchers and practitioners to reason on existing combined-program-analysis techniques, and steer further research on new useful combined-program-analysis techniques and analysis frameworks.

What carries the argument

The taxonomy that classifies combined program analysis techniques by their aimed synergistic effects, inter-analysis workflows, and interaction schemata known as mapping functions.

If this is right

  • Researchers gain a structured way to compare and understand existing combined analysis approaches.
  • The mapping highlights which types of synergies have been most explored and which are underused.
  • Future analysis frameworks can be designed by building on the identified interaction patterns.
  • Practitioners can select combinations based on the specific benefits like improved precision or coverage they need.

Where Pith is reading between the lines

These are editorial extensions of the paper, not claims the author makes directly.

  • Developers of new analysis tools could use this framework to systematically explore untried combinations of techniques.
  • The taxonomy might be extended to include emerging methods like machine learning based analyses.
  • Applying the taxonomy to industrial case studies could test its practical utility beyond academic literature.

Load-bearing premise

The selected 248 studies form a representative sample of the literature and the taxonomy accurately groups the interactions found in them.

What would settle it

Finding a substantial number of recent papers on combined program analyses that do not align with any category in the proposed taxonomy or that pursue synergies not accounted for would challenge the completeness of the mapping.

Figures

Figures reproduced from arXiv: 2605.20310 by Elson Kurian, Enea Raffaele Ilario Papaleo, Giovanni Denaro, Luca Gugliemo, Martino Tessaro, Pietro Braione.

Figure 1
Figure 1. Figure 1: Combined-analysis workflow of Check’n’Crash [PITH_FULL_IMAGE:figures/full_fig_p005_1.png] view at source ↗
Figure 2
Figure 2. Figure 2: Dimensions to classify combined-program-analysis techniques [PITH_FULL_IMAGE:figures/full_fig_p007_2.png] view at source ↗
Figure 3
Figure 3. Figure 3: Combined-analysis workflow of concolic execution [PITH_FULL_IMAGE:figures/full_fig_p008_3.png] view at source ↗
Figure 4
Figure 4. Figure 4: Combined-analysis workflow of counter example guided abstract refinement [PITH_FULL_IMAGE:figures/full_fig_p010_4.png] view at source ↗
Figure 5
Figure 5. Figure 5: Combined-analysis workflow of the Marvin malware classifier refers only to statically computed features or only to dynamically computed features, respectively. It should be noted that the expected synergy resides in being able to exploit also correlations between static and dynamic characteristics, such that the effectiveness could be arguably higher than the sum of the effectiveness of using the static-an… view at source ↗
Figure 6
Figure 6. Figure 6: Keywords and logical structure of the query [PITH_FULL_IMAGE:figures/full_fig_p013_6.png] view at source ↗
Figure 7
Figure 7. Figure 7: Exclusion criteria 5 RESULTS This section presents the data that we extracted from the primary studies, answering the research questions. 5.1 Synergistic Effects (RQ 1) [PITH_FULL_IMAGE:figures/full_fig_p014_7.png] view at source ↗
Figure 8
Figure 8. Figure 8: Distribution of the synergistic effects across the primary studies [PITH_FULL_IMAGE:figures/full_fig_p015_8.png] view at source ↗
Figure 9
Figure 9. Figure 9: Distribution of inter-analysis workflows across the primary studies [PITH_FULL_IMAGE:figures/full_fig_p020_9.png] view at source ↗
Figure 10
Figure 10. Figure 10: Distribution of mapping-function interpretation structures across the primary studies [PITH_FULL_IMAGE:figures/full_fig_p020_10.png] view at source ↗
Figure 11
Figure 11. Figure 11: Distribution of mapping-function mechanics across the primary studies [PITH_FULL_IMAGE:figures/full_fig_p023_11.png] view at source ↗
read the original abstract

Context. Since the eighties, the combination of program analysis techniques has been increasingly recognized as a promising approach to overcome the limitations of standalone methods. While individual techniques, based on either static or dynamic analysis, address important challenges in software dependability, their integration often yields synergistic effects on precision, coverage and insights. Objective. This paper surveys a significant portion of the modern literature on combining program analysis techniques, consisting of 248 primary studies, with the aim of cataloging the types of interactions and synergies that were exploited to define combined-program-analysis techniques so far. The goal is to provide a structured understanding of why and how program analysis techniques can be conjoined, and which benefits can arise from their interactions. Method. We devise an original taxonomy that classifies combined-program-analysis techniques according to their aimed synergistic effects, inter-analysis workflows and interaction schemata (to which we refer to as mapping functions). We then map the primary studies to the taxonomy, answering research questions on which synergistic effects those studies pursued via the combination of analysis techniques, which inter-analysis workflows they embodied, and which types of mapping functions they exploited. Conclusion. Our taxonomy and literature mapping reveal the commonalities and the differences, in terms of goals and patterns, in the design of combined-program-analysis techniques. Thereby we provide a framework of concepts that can foster the ability of researchers and practitioners to reason on existing combined-program-analysis techniques, and steer further research on new useful combined-program-analysis techniques and analysis frameworks.

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, simulated authors' rebuttal, and a circularity audit. Tearing a paper down is the easy half of reading it; the pith above is the substance, this is the friction.

Referee Report

2 major / 2 minor

Summary. The paper conducts a systematic mapping study of 248 primary studies on combined program analysis techniques. It devises an original taxonomy classifying these techniques according to aimed synergistic effects, inter-analysis workflows, and interaction schemata (mapping functions). The studies are mapped to the taxonomy to answer research questions on pursued synergistic effects, embodied workflows, and exploited mapping functions, with the conclusion that this reveals commonalities and differences to provide a framework for reasoning about existing techniques and guiding new research.

Significance. If the mapping is robust, this work provides a structured conceptual framework for understanding synergies in program analysis, which could help researchers and practitioners design more effective combined techniques. Cataloging 248 studies and explicitly defining interaction patterns is a useful contribution to the software engineering literature on analysis dependability.

major comments (2)
  1. [Method] Method section: The description of the search strategy, databases, inclusion/exclusion criteria, and any inter-rater reliability or iterative taxonomy refinement process for classifying the 248 studies is not detailed enough in the abstract and appears insufficient in the method to allow verification of the mapping results. This is load-bearing for the central claim that the taxonomy accurately captures interactions and synergies across a representative portion of the literature.
  2. [Results] Results and mapping sections: The claims about revealed commonalities and differences in goals and patterns lack supporting quantitative summaries (e.g., counts or percentages of studies per taxonomy category) or concrete examples tied to specific primary studies. Without these, the framework's utility for steering further research cannot be fully assessed.
minor comments (2)
  1. [Abstract] Abstract: Consider adding one sentence on the main observed patterns from the mapping (e.g., most frequent synergistic effects) to better preview the findings.
  2. Figures: Taxonomy diagrams would benefit from explicit labels linking categories to the three dimensions (synergistic effects, workflows, mapping functions) for improved clarity.

Simulated Author's Rebuttal

2 responses · 0 unresolved

We thank the referee for the detailed and constructive review of our systematic mapping study. The comments highlight important areas for improving the transparency of our methodology and the evidential support for our findings. We address each major comment below and commit to revisions that strengthen the manuscript without altering its core contributions.

read point-by-point responses

  1. Referee: [Method] Method section: The description of the search strategy, databases, inclusion/exclusion criteria, and any inter-rater reliability or iterative taxonomy refinement process for classifying the 248 studies is not detailed enough in the abstract and appears insufficient in the method to allow verification of the mapping results. This is load-bearing for the central claim that the taxonomy accurately captures interactions and synergies across a representative portion of the literature.

    Authors: We agree that the Method section would benefit from greater detail to support independent verification. In the revised manuscript we will expand this section to include the precise search strings and filters applied to each database, a complete enumeration of inclusion and exclusion criteria together with illustrative examples of borderline cases, the PRISMA-style flow diagram with exact counts at each screening stage, and a description of the inter-rater reliability procedure (including any kappa statistic) as well as the iterative process used to refine the taxonomy categories. These additions will be placed in the main text or a dedicated appendix so that readers can fully reconstruct the mapping process. revision: yes

  2. Referee: [Results] Results and mapping sections: The claims about revealed commonalities and differences in goals and patterns lack supporting quantitative summaries (e.g., counts or percentages of studies per taxonomy category) or concrete examples tied to specific primary studies. Without these, the framework's utility for steering further research cannot be fully assessed.

    Authors: We accept that the current presentation relies primarily on qualitative description. To address this, the revised version will add explicit quantitative summaries: tables or bar charts reporting the absolute counts and percentages of the 248 studies assigned to each synergistic-effect category, each workflow type, and each mapping-function class. In addition, we will insert short, concrete vignettes drawn from representative primary studies (cited by their study identifiers) that exemplify the most frequent patterns and the notable outliers. These changes will make the commonalities and differences directly observable and will better demonstrate the framework's utility for guiding new work. revision: yes

Circularity Check

0 steps flagged

No circularity: results grounded in external primary studies

full rationale

This systematic mapping study devises a taxonomy and maps 248 external primary studies to it, answering research questions on synergistic effects, workflows, and mapping functions. The central claims derive directly from cataloging independent literature rather than any self-referential equations, fitted parameters renamed as predictions, or load-bearing self-citations that reduce the framework to the paper's own inputs. The taxonomy is presented as original but is applied to and validated against the surveyed studies, keeping the derivation self-contained against external benchmarks with no reduction by construction.

Axiom & Free-Parameter Ledger

0 free parameters · 1 axioms · 0 invented entities

The study depends on the completeness of its literature search and the validity of the proposed taxonomy as a classification scheme; no free parameters or invented entities are introduced.

axioms (1)
  • domain assumption The 248 primary studies form a representative sample of modern literature on combined program analysis techniques.
    Stated in the objective as surveying a significant portion of the modern literature.

pith-pipeline@v0.9.0 · 5811 in / 1245 out tokens · 40577 ms · 2026-05-21T02:11:02.122067+00:00 · methodology

discussion (0)

Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.

Lean theorems connected to this paper

Citations machine-checked in the Pith Canon. Every link opens the source theorem in the public Lean library.

What do these tags mean?
matches
The paper's claim is directly supported by a theorem in the formal canon.
supports
The theorem supports part of the paper's argument, but the paper may add assumptions or extra steps.
extends
The paper goes beyond the formal theorem; the theorem is a base layer rather than the whole result.
uses
The paper appears to rely on the theorem as machinery.
contradicts
The paper's claim conflicts with a theorem or certificate in the canon.
unclear
Pith found a possible connection, but the passage is too broad, indirect, or ambiguous to say the theorem truly supports the claim.

Reference graph

Works this paper leans on

300 extracted references · 300 canonical work pages

  1. [1]

    2021 , organization=

    Chen, Yufeng , booktitle=. 2021 , organization=

    work page 2021

  2. [2]

    2013 IEEE 24th International Symposium on Software Reliability Engineering (ISSRE) , pages=

    Combining testing and proof to gain high assurance in software: a case study , author=. 2013 IEEE 24th International Symposium on Software Reliability Engineering (ISSRE) , pages=. 2013 , organization=

    work page 2013

  3. [3]

    2013 IEEE Sixth International Conference on Software Testing, Verification and Validation , pages=

    Efficient JavaScript mutation testing , author=. 2013 IEEE Sixth International Conference on Software Testing, Verification and Validation , pages=. 2013 , organization=

    work page 2013

  4. [4]

    2021 IEEE/ACM 43rd International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP) , pages=

    LightSys: lightweight and efficient CI system for improving integration speed of software , author=. 2021 IEEE/ACM 43rd International Conference on Software Engineering: Software Engineering in Practice (ICSE-SEIP) , pages=. 2021 , organization=

    work page 2021

  5. [5]

    2017 IEEE International Conference on Software Testing, Verification and Validation (ICST) , pages=

    Perphecy: Performance regression test selection made simple but effective , author=. 2017 IEEE International Conference on Software Testing, Verification and Validation (ICST) , pages=. 2017 , organization=

    work page 2017

  6. [6]

    2015 30th IEEE/ACM International Conference on Automated Software Engineering (ASE) , pages=

    Grt: Program-analysis-guided random testing (t) , author=. 2015 30th IEEE/ACM International Conference on Automated Software Engineering (ASE) , pages=. 2015 , organization=

    work page 2015

  7. [7]

    2017 IEEE 28th International Symposium on Software Reliability Engineering (ISSRE) , pages=

    Reflection analysis for java: Uncovering more reflective targets precisely , author=. 2017 IEEE 28th International Symposium on Software Reliability Engineering (ISSRE) , pages=. 2017 , organization=

    work page 2017

  8. [8]

    2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE) , pages=

    Test transfer across mobile apps through semantic mapping , author=. 2019 34th IEEE/ACM International Conference on Automated Software Engineering (ASE) , pages=. 2019 , organization=

    work page 2019

  9. [9]

    IEEE Transactions on Software Engineering , volume=

    Towards model checking android applications , author=. IEEE Transactions on Software Engineering , volume=. 2017 , publisher=

    work page 2017

  10. [10]

    Proceedings of the 44th International Conference on Software Engineering: Software Engineering in Practice , pages=

    Automatically identifying shared root causes of test breakages in SAP HANA , author=. Proceedings of the 44th International Conference on Software Engineering: Software Engineering in Practice , pages=

    work page

  11. [11]

    Proceedings of the 28th ACM joint meeting on european software engineering conference and symposium on the foundations of software engineering , pages=

    Jshrink: In-depth investigation into debloating modern java applications , author=. Proceedings of the 28th ACM joint meeting on european software engineering conference and symposium on the foundations of software engineering , pages=

    work page

  12. [12]

    On the Interplay Between Static and Dynamic Analysis for Mining Sandboxes , year=

    da Costa Francisco Handrick , booktitle=. On the Interplay Between Static and Dynamic Analysis for Mining Sandboxes , year=

    work page

  13. [13]

    Automated Test Generation from Vulnerability Signatures , year=

    Aydin, Abdulbaki and Alkhalaf, Muath and Bultan, Tevfik , booktitle=. Automated Test Generation from Vulnerability Signatures , year=

    work page

  14. [14]

    Automated web application testing using search based software engineering , year=

    Alshahwan, Nadia and Harman, Mark , booktitle=. Automated web application testing using search based software engineering , year=

    work page

  15. [15]

    Guided Test Generation for Finding Worst-Case Stack Usage in Embedded Systems , year=

    Yu, Tingting and Cohen, Myra , booktitle=. Guided Test Generation for Finding Worst-Case Stack Usage in Embedded Systems , year=

    work page

  16. [16]

    Automated Accessibility Testing of Mobile Apps , year=

    Eler, Marcelo Medeiros and Rojas, Jose Miguel and Ge, Yan and Fraser, Gordon , booktitle=. Automated Accessibility Testing of Mobile Apps , year=

    work page

  17. [17]

    and Böhme, Marcel and Zeller, Andreas , booktitle=

    Mathis, Björn and Avdiienko, Vitalii and Soremekun, Ezekiel O. and Böhme, Marcel and Zeller, Andreas , booktitle=. Detecting information flow by mutating input data , year=

    work page

  18. [18]

    2017 , volume=

    Nongpoh, Bernard and Ray, Rajarshi and Dutta, Saikat and Banerjee, Ansuman , journal=. 2017 , volume=

    work page 2017

  19. [19]

    Guided Mutation Testing for JavaScript Web Applications , year=

    Mirshokraie, Shabnam and Mesbah, Ali and Pattabiraman, Karthik , journal=. Guided Mutation Testing for JavaScript Web Applications , year=

    work page

  20. [20]

    2019 , volume=

    Yu, Tingting and Wen, Wei and Han, Xue and Hayes, Jane Huffman , journal=. 2019 , volume=

    work page 2019

  21. [21]

    Leveraging Android Automated Testing to Assist Crowdsourced Testing , year=

    Ge, Xiuting and Yu, Shengcheng and Fang, Chunrong and Zhu, Qi and Zhao, Zhihong , journal=. Leveraging Android Automated Testing to Assist Crowdsourced Testing , year=

    work page

  22. [22]

    Efficiently Manifesting Asynchronous Programming Errors in Android Apps , year=

    Fan, Lingling and Sus, Ting and Chen, Sen and Meng, Guozhu and Liu, Yang and Xu, Lihua and Pu, Geguang , booktitle=. Efficiently Manifesting Asynchronous Programming Errors in Android Apps , year=

    work page

  23. [23]

    , title =

    Messaoudi, Salma and Shin, Donghwan and Panichella, Annibale and Bianculli, Domenico and Briand, Lionel C. , title =. 2021 , isbn =. doi:10.1145/3460319.3464824 , booktitle =

    work page doi:10.1145/3460319.3464824 2021

  24. [24]

    2020 , isbn =

    Hough, Katherine and Welearegai, Gebrehiwet and Hammer, Christian and Bell, Jonathan , title =. 2020 , isbn =. doi:10.1145/3377811.3380326 , booktitle =

    work page doi:10.1145/3377811.3380326 2020

  25. [25]

    Proceedings of the 34th IEEE/ACM International Conference on Automated Software Engineering , pages =

    Lai, Duling and Rubin, Julia , title =. Proceedings of the 34th IEEE/ACM International Conference on Automated Software Engineering , pages =. 2020 , isbn =. doi:10.1109/ASE.2019.00021 , abstract =

    work page doi:10.1109/ase.2019.00021 2020

  26. [26]

    and Furia, Carlo A

    Galeotti, Juan P. and Furia, Carlo A. and May, Eva and Fraser, Gordon and Zeller, Andreas , journal=. Inferring Loop Invariants by Mutation, Dynamic Analysis, and Static Checking , year=

    work page

  27. [27]

    Segmented symbolic analysis , year=

    Le, Wei , booktitle=. Segmented symbolic analysis , year=

    work page

  28. [28]

    Proceedings of the 34th IEEE/ACM International Conference on Automated Software Engineering , pages =

    Lukasczyk, Stephan , title =. Proceedings of the 34th IEEE/ACM International Conference on Automated Software Engineering , pages =. 2020 , isbn =. doi:10.1109/ASE.2019.00146 , abstract =

    work page doi:10.1109/ase.2019.00146 2020

  29. [29]

    Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering , pages =

    Chen, Tianyi and Heo, Kihong and Raghothaman, Mukund , title =. Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering , pages =. 2021 , isbn =. doi:10.1145/3468264.3468626 , abstract =

    work page doi:10.1145/3468264.3468626 2021

  30. [30]

    2011 , volume=

    Ge, Xi and Taneja, Kunal and Xie, Tao and Tillmann, Nikolai , booktitle=. 2011 , volume=

    work page 2011

  31. [31]

    Proceedings of the 2013 9th Joint Meeting on Foundations of Software Engineering , pages =

    Marinescu, Paul Dan and Cadar, Cristian , title =. Proceedings of the 2013 9th Joint Meeting on Foundations of Software Engineering , pages =. 2013 , isbn =. doi:10.1145/2491411.2491438 , abstract =

    work page doi:10.1145/2491411.2491438 2013

  32. [32]

    Information and Software Technology , volume=

    FSCT: A new fuzzy search strategy in concolic testing , author=. Information and Software Technology , volume=. 2019 , publisher=

    work page 2019

  33. [33]

    SCOUT: A Multi-objective Method to Select Components in Designing Unit Testing , year=

    Noronha De Andrade Freitas, Eduardo and Camilo, Celso Gonçalves and Rizzo Vincenzi, Auri Marcelo , booktitle=. SCOUT: A Multi-objective Method to Select Components in Designing Unit Testing , year=

    work page

  34. [34]

    Automated repair of HTML generation errors in PHP applications using string constraint solving , year=

    Samimi, Hesam and Schäfer, Max and Artzi, Shay and Millstein, Todd and Tip, Frank and Hendren, Laurie , booktitle=. Automated repair of HTML generation errors in PHP applications using string constraint solving , year=

    work page

  35. [35]

    Proceedings of the 2006 International Symposium on Software Testing and Analysis (ISSTA 2006) , pages =

    Greta Yorsh and Thomas Ball and Mooly Sagiv , title =. Proceedings of the 2006 International Symposium on Software Testing and Analysis (ISSTA 2006) , pages =

    work page 2006

  36. [36]

    Gulavani and Thomas A

    Bhargav S. Gulavani and Thomas A. Henzinger and Yamini Kannan and Aditya V. Nori and Sriram K. Rajamani , title =. Proceedings of the 14th ACM SIGSOFT symposium on Foundations of Software Engineering (FSE-14) , pages =

    work page

  37. [37]

    Beckman and Aditya V

    Nels E. Beckman and Aditya V. Nori and Sriram K. Rajamani and Robert J. Simmons , title =. Proceedings of the 2008 International Symposium on Software Testing and Analysis (ISSTA 2008) , pages =

    work page 2008

  38. [38]

    Formal Methods and Software Engineering: Proceedings of the 6th International Conference on Formal Engineering Methods (ICFEM 2004) , pages =

    Daniel Kroening and Alex Groce and Edmund Clarke , title =. Formal Methods and Software Engineering: Proceedings of the 6th International Conference on Formal Engineering Methods (ICFEM 2004) , pages =

    work page 2004

  39. [39]

    ACM Transactions on Software Engineering and Methodology (TOSEM) , year = 2008, volume = 17, number = 2, pages =

    Christoph Csallner and Yannis Smaragdakis and Tao Xie , title =. ACM Transactions on Software Engineering and Methodology (TOSEM) , year = 2008, volume = 17, number = 2, pages =

    work page 2008

  40. [40]

    Proceedings of the 27th International Conference on Software Engineering (ICSE 2005) , pages =

    Christoph Csallner and Yannis Smaragdakis , title =. Proceedings of the 27th International Conference on Software Engineering (ICSE 2005) , pages =

    work page 2005

  41. [41]

    Proceedings of the 30th International Conference on Software Engineering (ICSE 2008) , pages =

    Christoph Csallner and Nikolai Tillmann and Yannis Smaragdakis , title =. Proceedings of the 30th International Conference on Software Engineering (ICSE 2008) , pages =

    work page 2008

  42. [42]

    Software---Practice and Experience , volume =

    Christoph Csallner and Yannis Smaragdakis , title =. Software---Practice and Experience , volume =

    work page

  43. [43]

    Proceedings of the ACM SIGPLAN 2005 Conference on Programming Language Design and Implementation (PLDI 2005) , YEAR =

    Patrice Godefroid and Nils Klarlund and Koushik Sen , TITLE =. Proceedings of the ACM SIGPLAN 2005 Conference on Programming Language Design and Implementation (PLDI 2005) , YEAR =

    work page 2005

  44. [44]

    Koushik Sen and Darko Marinov and Gul Agha , title =. Proceedings of the 10th European software engineering conference held jointly with 13th ACM SIGSOFT international symposium on Foundations of software engineering (ESEC/FSE-13) , pages =

    work page

  45. [45]

    Proceedings of the 10th ACM SIGSOFT symposium on Foundations of Software Engineering (FSE-10) , pages =

    Andreas Zeller , title =. Proceedings of the 10th ACM SIGSOFT symposium on Foundations of Software Engineering (FSE-10) , pages =

    work page

  46. [46]

    Corina S. P. Combining unit-level symbolic execution and system-level concrete execution for testing. Proceedings of the 2008 International Symposium on Software Testing and Analysis (ISSTA 2008) , pages =

    work page 2008

  47. [47]

    Cyrille Artho and Armin Biere , title =

    work page

  48. [48]

    ACM SIGPLAN Notices , year = 2004, volume = 39, number = 12, pages =

    David Hovemeyer and William Pugh , title =. ACM SIGPLAN Notices , year = 2004, volume = 39, number = 12, pages =

    work page 2004

  49. [49]

    Taylor , title =

    Michal Young and Richard N. Taylor , title =. Proceedings of the 11th International Conference on Software Engineering (ICSE 1989) , pages =

    work page 1989

  50. [50]

    Ernst , title =

    Michael D. Ernst , title =. Proceedings of the 2003 Workshop on Dynamic Analysis (WODA 2003) , pages =

    work page 2003

  51. [51]

    Mantyla and Jari Vanhanen and Casper Lassenius , title =

    Mika V. Mantyla and Jari Vanhanen and Casper Lassenius , title =. Proceedings of the 20th IEEE International Conference on Software Maintenance (. 2004 , pages =

    work page 2004

  52. [52]

    Ernst and Jake Cockrell and William G

    Michael D. Ernst and Jake Cockrell and William G. Griswold and David Notkin , title =. IEEE Transactions on Software Engineering , volume =. 2001 , note =

    work page 2001

  53. [53]

    Rustan M

    Cormac Flanagan and K. Rustan M. Leino and Mark Lillibridge and Greg Nelson and James B. Saxe and Raymie Stata , title =. Proceedings of the ACM SIGPLAN 2002 Conference on Programming Language Design and Implementation (PLDI '02) , year =. doi:http://doi.acm.org/10.1145/512529.512558 , publisher =

    work page doi:10.1145/512529.512558 2002

  54. [54]

    Proceedings of the Joint ERCIM/CologNet International Workshop on Constraint Solving and Constraint Logic Programming , year =

    Hans Schlenker and Georg Ringwelski , title =. Proceedings of the Joint ERCIM/CologNet International Workshop on Constraint Solving and Constraint Logic Programming , year =

    work page

  55. [55]

    Abstract interpretation: A un ified lattice model for static analysis of programs by construction or app roximation of fixpoints,

    Cousot, Patrick and Cousot, Radhia , title =. POPL '77: Proceedings of the 4th ACM SIGACT-SIGPLAN symposium on Principles of programming languages , year =. doi:http://doi.acm.org/10.1145/512950.512973 , publisher =

    work page doi:10.1145/512950.512973

  56. [56]

    In: In Proc

    Thomas Ball and Rupak Majumdar and Todd Millstein and Sriram K. Rajamani , title =. ACM SIGPLAN Notices , volume =. 2001 , issn =. doi:http://doi.acm.org/10.1145/381694.378846 , publisher =

    work page doi:10.1145/381694.378846 2001

  57. [57]

    CrashScope: A Practical Tool for Automated Testing of Android Applications , year=

    Moran, Kevin and Linares-Vasquez, Mario and Bernal-Cardenas, Carlos and Vendome, Christopher and Poshyvanyk, Denys , booktitle=. CrashScope: A Practical Tool for Automated Testing of Android Applications , year=

    work page

  58. [58]

    , booktitle=

    Zhang, Sai and Ernst, Michael D. , booktitle=. Automated diagnosis of software configuration errors , year=

    work page

  59. [59]

    TrEKer: Tracing error propagation in operating system kernels , year=

    Coppik, Nicolas and Schwahn, Oliver and Winter, Stefan and Suri, Neeraj , booktitle=. TrEKer: Tracing error propagation in operating system kernels , year=

    work page

  60. [60]

    ACM Trans

    Pan, Minxue and Lu, Yifei and Pei, Yu and Zhang, Tian and Li, Xuandong , title =. ACM Trans. Softw. Eng. Methodol. , month =. 2023 , issue_date =. doi:10.1145/3511804 , abstract =

    work page doi:10.1145/3511804 2023

  61. [61]

    Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis , pages =

    Yang, Shuaihao and Zeng, Zigang and Song, Wei , title =. Proceedings of the 31st ACM SIGSOFT International Symposium on Software Testing and Analysis , pages =. 2022 , isbn =. doi:10.1145/3533767.3534221 , abstract =

    work page doi:10.1145/3533767.3534221 2022

  62. [62]

    2015 IEEE/ACM 37th IEEE International Conference on Software Engineering , volume=

    Dynamic data flow testing of object oriented systems , author=. 2015 IEEE/ACM 37th IEEE International Conference on Software Engineering , volume=. 2015 , organization=

    work page 2015

  63. [63]

    2013 , organization=

    Zhang, Sai , booktitle=. 2013 , organization=

    work page 2013

  64. [64]

    2018 IEEE 29th International Symposium on Software Reliability Engineering (ISSRE) , pages=

    Search-based test data generation for JavaScript functions that interact with the DOM , author=. 2018 IEEE 29th International Symposium on Software Reliability Engineering (ISSRE) , pages=. 2018 , organization=

    work page 2018

  65. [65]

    IEEE Transactions on Software Engineering , volume=

    Automatically distilling storyboard with rich features for android apps , author=. IEEE Transactions on Software Engineering , volume=. 2022 , publisher=

    work page 2022

  66. [66]

    and Etien, Anne , booktitle=

    Delplanque, Julien and Ducasse, Stéphane and Polito, Guillermo and Black, Andrew P. and Etien, Anne , booktitle=. Rotten Green Tests , year=

    work page

  67. [67]

    , title =

    Zhang, Sai and Saff, David and Bu, Yingyi and Ernst, Michael D. , title =. 2011 , isbn =. doi:10.1145/2001420.2001463 , booktitle =

    work page doi:10.1145/2001420.2001463 2011

  68. [68]

    Practical GUI Testing of Android Applications Via Model Abstraction and Refinement , year=

    Gu, Tianxiao and Sun, Chengnian and Ma, Xiaoxing and Cao, Chun and Xu, Chang and Yao, Yuan and Zhang, Qirun and Lu, Jian and Su, Zhendong , booktitle=. Practical GUI Testing of Android Applications Via Model Abstraction and Refinement , year=

    work page

  69. [69]

    2022 , isbn =

    Leesatapornwongsa, Tanakorn and Ren, Xiang and Nath, Suman , title =. 2022 , isbn =. doi:10.1145/3540250.3558956 , pages =

    work page doi:10.1145/3540250.3558956 2022

  70. [70]

    2018 IEEE 11th International Conference on Software Testing, Verification and Validation (ICST) , pages =

    Pradhan, Dipesh and Wang, Shuai and Wang, Shuai and Yue, Tao and Liaaen, Marius , year =. 2018 IEEE 11th International Conference on Software Testing, Verification and Validation (ICST) , pages =

    work page 2018

  71. [71]

    VERMEER: A tool for tracing and explaining faulty

    Schwartz-Narbonne, Daniel and Oh, Chanseok and Sch. VERMEER: A tool for tracing and explaining faulty. 2015 IEEE/ACM 37th IEEE International Conference on Software Engineering , volume=. 2015 , organization=

    work page 2015

  72. [72]

    Proceedings of the 44th International Conference on Software Engineering , pages=

    Difuzer: Uncovering suspicious hidden sensitive operations in android apps , author=. Proceedings of the 44th International Conference on Software Engineering , pages=

    work page

  73. [73]

    Regular Property Guided Dynamic Symbolic Execution , year=

    Zhang, Yufeng and Chen, Zhenbang and Wang, Ji and Dong, Wei and Liu, Zhiming , booktitle=. Regular Property Guided Dynamic Symbolic Execution , year=

    work page

  74. [74]

    Proceedings

    Automated support for development, maintenance, and testing in the presence of implicit flow control , author=. Proceedings. 26th International Conference on Software Engineering , pages=. 2004 , organization=

    work page 2004

  75. [75]

    2012 34th International Conference on Software Engineering (ICSE) , pages=

    Statically checking API protocol conformance with mined multi-object specifications , author=. 2012 34th International Conference on Software Engineering (ICSE) , pages=. 2012 , organization=

    work page 2012

  76. [76]

    2012 34th International Conference on Software Engineering (ICSE) , pages=

    How much does unused code matter for maintenance? , author=. 2012 34th International Conference on Software Engineering (ICSE) , pages=. 2012 , organization=

    work page 2012

  77. [77]

    IEEE Transactions on software engineering , volume=

    Locating features in source code , author=. IEEE Transactions on software engineering , volume=. 2003 , publisher=

    work page 2003

  78. [78]

    RRF: A Race Reproduction Framework for Use in Debugging Process-Level Races , year=

    Rattanasuksun, Supat and Yu, Tingting and Srisa-An, Witawas and Rothermel, Gregg , booktitle=. RRF: A Race Reproduction Framework for Use in Debugging Process-Level Races , year=

    work page

  79. [79]

    2016 , volume =

    Moran, Kevin and Linares-Vasquez, Mario and Bernal-Cardenas, Carlos and Vendome, Christopher and Poshyvanyk, Denys , booktitle =. 2016 , volume =. doi:10.1109/ICST.2016.34 , url =

    work page doi:10.1109/icst.2016.34 2016

  80. [80]

    NIVAnalyzer: A Tool for Automatically Detecting and Verifying Next-Intent Vulnerabilities in Android Apps , year=

    Tang, Junjie and Cui, Xingmin and Zhao, Ziming and Guo, Shanqing and Xu, Xinshun and Hu, Chengyu and Ban, Tao and Mao, Bing , booktitle=. NIVAnalyzer: A Tool for Automatically Detecting and Verifying Next-Intent Vulnerabilities in Android Apps , year=

    work page

Showing first 80 references.