KLEE-related Publications and Systems

Below you can find a list of papers that use or extend KLEE. Papers are listed in chronological order.
If you have used and extended KLEE, please share your experience by having your paper listed here (email klee-dev-owner or c.cadar AT imperial.ac.uk).

0. KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs
   Cristian Cadar, Daniel Dunbar, Dawson Engler
   USENIX Symposium on Operating Systems Design and Implementation (OSDI 2008)
   December 8-10, 2008, San Diego, CA, USA
   
   
1. Server-side Verification of Client Behavior in Online Games
   Darrell Bethea, Robert Cochran, Michael Reiter
   Network and Distributed System Security Symposium (NDSS 2010)
   February 28 - March 3, San Diego, CA, USA
   
   
2. KleeNet: Discovering Insidious Interaction Bugs in Wireless Sensor Networks Before Deployment
   Raimondas Sasnauskas, Olaf Landsiedel, Muhammad Hamad Alizai, Carsten Weise, Stefan Kowalewski, Klaus Wehrle
   ACM/IEEE International Conference on Information Processing in Sensor Networks (IPSN 2010)
   April 12-16, 2010, Stockholm, Sweden
   KleeNet is available here.
   
   
3. Execution Synthesis: A Technique for Automated Software Debugging
   Cristian Zamfir, George Candea
   ACM SIGOPS/EuroSys European Conference on Computer Systems (EuroSys 2010)
   April 13-16, 2010, Paris, France
   
   
4. Reverse Engineering of Binary Device Drivers with RevNIC
   Vitaly Chipounov, George Candea
   ACM SIGOPS/EuroSys European Conference on Computer Systems (EuroSys 2010)
   April 13-16, 2010, Paris, France
   
   
5. Testing Closed-Source Binary Device Drivers with DDT
   Volodymyr Kuznetsov, Vitaly Chipounov, George Candea
   USENIX Annual Technical Conference (USENIX ATC 2010)
   June 22-25, 2010, Boston, MA, USA
   
   
6. Stable Deterministic Multithreading through Schedule Memoization
   Heming Cui, Jingyue Wu, Chia-che Tsai, Junfeng Yang
   USENIX Symposium on Operating Systems Design and Implementation (OSDI 2010)
   October 4-6, 2010, Vancouver, BC, Canada
   
   
7. AEG: Automatic Exploit Generation
   Thanassis Avgerinos, Sang Kil Cha, Brent Lim Tze Hao, David Brumley
   Network and Distributed System Security Symposium (NDSS 2011)
   February 6-9, 2011, San Diego, CA, USA
   
   
8. Howard: A Dynamic Excavator for Reverse Engineering Data Structures
   Asia Slowinska, Traian Stancescu, Herbert Bos
   Network and Distributed System Security Symposium (NDSS 2011)
   February 6-9, 2011, San Diego, CA, USA
   
   
9. S2E: A Platform for In Vivo Multi-Path Analysis of Software Systems
   Vitaly Chipounov, Volodymyr Kuznetsov, George Candea
   International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS 2011)
   March 5-11, 2011, Newport Beach, CA
   S2E is available here.
   
   
10. Parallel Symbolic Execution for Automated Real-World Software Testing
    ACM SIGOPS/EuroSys European Conference on Computer Systems (EuroSys 2011)
    Stefan Bucur, Vlad Ureche, Cristian Zamfir, George Candea
    April 10-13, 2011, Salzburg, Austria
    Cloud9 is available here.
    
    
11. Symbolic Crosschecking of Floating-Point and SIMD Code
    Peter Collingbourne, Cristian Cadar, Paul H. J. Kelly
    ACM SIGOPS/EuroSys European Conference on Computer Systems (EuroSys 2011)
    April 10-13, 2011, Salzburg, Austria
    
    
12. Practical, Low-Effort Equivalence Verification of Real Code
    David Ramos, Dawson Engler
    Computer Aided Verification (CAV 2011)
    July 16-20, 2011, Snowbird, UT, USA
    
    
13. Scalable Symbolic Execution of Distributed Systems
    Raimondas Sasnauskas, Oscar Soria Dustmann, Benjamin Lucien Kaminski, Carsten Weise, Stefan Kowalewski, Klaus Wehrle
    IEEE International Conference on Distributed Computing Systems (ICDCS 2011)
    June 20-24, 2011, Minneapolis, MN, USA
    
    
14. Efficient Deterministic Multithreading through Schedule Relaxation
    Heming Cui, Jingyue Wu, John Gallagher, Huayang Guo, Junfeng Yang
    ACM Symposium on Operating Systems Principles (SOSP 2011)
    October 23-26, 2011, Cascais, Portugal
    
    
15. KLOVER: A Symbolic Execution and Automatic Test Generation Tool for C++ Programs
    Guodong Li, Indradeep Ghosh and Sreeranga Rajan
    International Conference on Computer Aided Verification (CAV 2011)
    July 14-20, 2011, Cliff Lodge, Snowbird, UT, USA
    
    
16. Symbolic Testing of OpenCL Code
    Peter Collingbourne, Cristian Cadar, Paul H. J. Kelly
    Haifa Verification Conference (HVC 2011)
    December 6-8, 2011, Haifa, Israel
    
    
17. GKLEE: Concolic Verification and Test Generation for GPUs
    Guodong Li, Peng Li, Geof Sawaya, Ganesh Gopalakrishnan, Indradeep Ghosh, and Sreeranga P. Rajan
    ACM Symposium on Principles and Practice of Parallel Programming (PPoPP 2012)
    February 25-29, 2012, New Orleans, LA, USA
    GKLEE is available here.
    
    
18. make test-zesti: A Symbolic Execution Solution for Improving Regression Testing
    Paul Dan Marinescu, Cristian Cadar
    International Conference on Software Engineering (ICSE 2012)
    June 2-9, 2012, Zurich, Switzerland
    ZESTI is available here.
    
    
19. BugRedux: Reproducing Field Failures for In-House Debugging
    Wei Jin, Alessandro Orso
    International Conference on Software Engineering (ICSE 2012)
    June 2-9, 2012, Zurich, Switzerland
    BugRedux is available here.
    
    
20. Efficient State Merging in Symbolic Execution
    Volodymyr Kuznetsov, Johannes Kinder, Stefan Bucur, George Candea
    Programming Language Design and Implementation (PLDI)
    June 11-16, 2012, Beijing, China
    
    
21. High-Coverage Symbolic Patch Testing
    Paul Dan Marinescu, Cristian Cadar
    SPIN Workshop on Model Checking of Software (SPIN 2012)
    July 23-24, 2012, Oxford, UK
    
    
22. Automatic Detection of Floating-Point Exceptions
    Peter C. Rigby, Earl T. Barr, Christian Bird, Premkumar Devanbu, Daniel M. German
    Principles of Programming Languages (POPL)
    January 23-25, 2013, Rome, Italy