{"id":"https://openalex.org/W4409362304","doi":"https://doi.org/10.1142/s0218194025300027","title":"A Systematic Literature Review of Software Vulnerability Mining Approaches Based on Symbolic Execution","display_name":"A Systematic Literature Review of Software Vulnerability Mining Approaches Based on Symbolic Execution","publication_year":2025,"publication_date":"2025-04-11","ids":{"openalex":"https://openalex.org/W4409362304","doi":"https://doi.org/10.1142/s0218194025300027"},"language":"en","primary_location":{"id":"doi:10.1142/s0218194025300027","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194025300027","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"},"type":"review","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087983468","display_name":"Lining Li","orcid":null},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lining Li","raw_affiliation_strings":["College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, P. R. China"],"raw_orcid":"https://orcid.org/0009-0000-3417-8091","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, P. R. China","institution_ids":["https://openalex.org/I9842412"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106407633","display_name":"Rong Ren","orcid":"https://orcid.org/0009-0002-9320-9382"},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rong Ren","raw_affiliation_strings":["School of Information Science and Engineering, Yanshan University, Qinhuangdao, P. R. China","The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P. R. China"],"raw_orcid":"https://orcid.org/0009-0002-9320-9382","affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, Yanshan University, Qinhuangdao, P. R. China","institution_ids":["https://openalex.org/I39333907"]},{"raw_affiliation_string":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P. R. China","institution_ids":["https://openalex.org/I39333907"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113560369","display_name":"Jun Dong","orcid":"https://orcid.org/0000-0002-9039-4685"},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Dong","raw_affiliation_strings":["School of Information Science and Engineering, Yanshan University, Qinhuangdao, P. R. China","The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P. R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, Yanshan University, Qinhuangdao, P. R. China","institution_ids":["https://openalex.org/I39333907"]},{"raw_affiliation_string":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P. R. China","institution_ids":["https://openalex.org/I39333907"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100673338","display_name":"Bing Zhang","orcid":"https://orcid.org/0000-0002-9867-8439"},"institutions":[{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bing Zhang","raw_affiliation_strings":["School of Information Science and Engineering, Yanshan University, Qinhuangdao, P. R. China","The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P. R. China"],"raw_orcid":"https://orcid.org/0000-0002-9867-8439","affiliations":[{"raw_affiliation_string":"School of Information Science and Engineering, Yanshan University, Qinhuangdao, P. R. China","institution_ids":["https://openalex.org/I39333907"]},{"raw_affiliation_string":"The Key Laboratory of Software Engineering, Yanshan University, Qinhuangdao, P. R. China","institution_ids":["https://openalex.org/I39333907"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100737919","display_name":"Kang Xu","orcid":"https://orcid.org/0000-0003-1733-3525"},"institutions":[{"id":"https://openalex.org/I204553293","display_name":"China University of Petroleum, Beijing","ror":"https://ror.org/041qf4r12","country_code":"CN","type":"education","lineage":["https://openalex.org/I204553293"]},{"id":"https://openalex.org/I39333907","display_name":"Yanshan University","ror":"https://ror.org/02txfnf15","country_code":"CN","type":"education","lineage":["https://openalex.org/I39333907"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xu Kang","raw_affiliation_strings":["China University of Petroleum-Beijing at Karamay, College of Petroleum, P. R. China","School of Information Science and Engineering, Yanshan University, Qinhuangdao, P. R. China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"China University of Petroleum-Beijing at Karamay, College of Petroleum, P. R. China","institution_ids":["https://openalex.org/I204553293"]},{"raw_affiliation_string":"School of Information Science and Engineering, Yanshan University, Qinhuangdao, P. R. China","institution_ids":["https://openalex.org/I39333907"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2174,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.66666667,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"35","issue":"05","first_page":"609","last_page":"656"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.982200026512146,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.982200026512146,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9573000073432922,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9480999708175659,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6738725304603577},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.6538848876953125},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.48311305046081543},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.45974594354629517},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.43404287099838257},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.4029929041862488},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3717155456542969},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3562203049659729},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.23405960202217102}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6738725304603577},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.6538848876953125},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.48311305046081543},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.45974594354629517},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.43404287099838257},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4029929041862488},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3717155456542969},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3562203049659729},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.23405960202217102}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s0218194025300027","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s0218194025300027","pdf_url":null,"source":{"id":"https://openalex.org/S131442419","display_name":"International Journal of Software Engineering and Knowledge Engineering","issn_l":"0218-1940","issn":["0218-1940","1793-6403"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319815","host_organization_name":"World Scientific","host_organization_lineage":["https://openalex.org/P4310319815"],"host_organization_lineage_names":["World Scientific"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Software Engineering and Knowledge Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4822674993","display_name":null,"funder_award_id":"F2022203089","funder_id":"https://openalex.org/F4320322163","funder_display_name":"Natural Science Foundation of Hebei Province"},{"id":"https://openalex.org/G6208503825","display_name":null,"funder_award_id":"F2023203026","funder_id":"https://openalex.org/F4320322163","funder_display_name":"Natural Science Foundation of Hebei Province"},{"id":"https://openalex.org/G7719504569","display_name":null,"funder_award_id":"F2022203026","funder_id":"https://openalex.org/F4320322163","funder_display_name":"Natural Science Foundation of Hebei Province"},{"id":"https://openalex.org/G8357833378","display_name":null,"funder_award_id":"62376240","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322163","display_name":"Natural Science Foundation of Hebei Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":61,"referenced_works":["https://openalex.org/W1128447031","https://openalex.org/W1480909796","https://openalex.org/W1497028280","https://openalex.org/W1548806133","https://openalex.org/W1579437898","https://openalex.org/W1926206757","https://openalex.org/W1971719033","https://openalex.org/W1992485833","https://openalex.org/W2011367000","https://openalex.org/W2041572101","https://openalex.org/W2091968063","https://openalex.org/W2101512909","https://openalex.org/W2102495716","https://openalex.org/W2107147876","https://openalex.org/W2113864883","https://openalex.org/W2119251836","https://openalex.org/W2128985333","https://openalex.org/W2134633067","https://openalex.org/W2138788987","https://openalex.org/W2146110773","https://openalex.org/W2155539595","https://openalex.org/W2163499368","https://openalex.org/W2166280160","https://openalex.org/W2170082978","https://openalex.org/W2171282711","https://openalex.org/W2471111208","https://openalex.org/W2518440340","https://openalex.org/W2574017551","https://openalex.org/W2751940653","https://openalex.org/W2777046235","https://openalex.org/W2793201049","https://openalex.org/W2795052548","https://openalex.org/W2798388185","https://openalex.org/W2805375386","https://openalex.org/W2808820334","https://openalex.org/W2888246077","https://openalex.org/W2899983867","https://openalex.org/W2925685215","https://openalex.org/W2963723316","https://openalex.org/W2964177714","https://openalex.org/W2967996334","https://openalex.org/W2969087412","https://openalex.org/W2985495886","https://openalex.org/W3008890513","https://openalex.org/W3090475639","https://openalex.org/W3119014038","https://openalex.org/W3190470290","https://openalex.org/W3205422842","https://openalex.org/W3213182664","https://openalex.org/W4234542549","https://openalex.org/W4237492309","https://openalex.org/W4246385123","https://openalex.org/W4246691913","https://openalex.org/W4285586691","https://openalex.org/W4296412272","https://openalex.org/W4316013191","https://openalex.org/W4317382974","https://openalex.org/W4375846758","https://openalex.org/W4384302786","https://openalex.org/W4394935857","https://openalex.org/W4399376277"],"related_works":["https://openalex.org/W2905722102","https://openalex.org/W2155539595","https://openalex.org/W2752815423","https://openalex.org/W4306251929","https://openalex.org/W345638404","https://openalex.org/W2801797726","https://openalex.org/W4295529944","https://openalex.org/W844671342","https://openalex.org/W2521287362","https://openalex.org/W4239107164"],"abstract_inverted_index":{"With":[0],"the":[1,5,8,50,73,116,121,137,141,145,149,155,163,166,170,173,177,198],"rapid":[2],"development":[3,56],"of":[4,11,34,58,84,96,157,191,206],"software":[6,12,174],"industry,":[7],"escalating":[9],"issue":[10],"vulnerabilities":[13],"has":[14],"posed":[15],"significant":[16],"risks":[17],"to":[18,71],"users.":[19],"Symbolic":[20],"execution":[21,36,86,108,123,151,167],"as":[22,215],"a":[23,28,63,80,93,158,186,216],"vulnerability":[24,89,111,207],"mining":[25],"technology":[26],"offers":[27],"high-test":[29],"coverage.":[30],"The":[31],"existing":[32,76],"reviews":[33,77],"symbolic":[35,85,107,122,150,212],"methods":[37],"focus":[38],"on":[39,106,148,179,211],"summarizing":[40],"various":[41],"techniques":[42,87,109,118],"and":[43,55,65,103,131,144,161,176,188,194],"tools.":[44],"While":[45],"some":[46],"studies":[47],"have":[48],"analyzed":[49,162],"technical":[51],"challenges,":[52],"classification":[53],"frameworks":[54],"trends":[57],"these":[59],"methods,":[60],"they":[61],"lack":[62],"comprehensive":[64,187],"systematic":[66,82,189],"review.":[67],"This":[68,200],"study":[69,201],"aims":[70],"address":[72],"gap":[74],"in":[75,120,154,197,221],"by":[78],"providing":[79],"comprehensive,":[81],"analysis":[83,205],"for":[88,110,219],"mining.":[90,112],"We":[91],"conducted":[92],"detailed":[94,146],"review":[95],"60":[97],"peer-reviewed":[98],"papers":[99],"published":[100],"between":[101],"2005":[102],"2024,":[104],"focusing":[105],"First,":[113],"we":[114,135,184],"reviewed":[115],"main":[117,138],"used":[119],"process,":[124],"including":[125],"program":[126],"instrumentation,":[127],"path":[128],"selection":[129],"strategy":[130],"constraint-solving":[132],"techniques.":[133],"Second,":[134],"extracted":[136],"information":[139,147],"from":[140],"selected":[142],"papers,":[143],"tools":[152],"is":[153],"form":[156],"table.":[159],"Compared":[160],"research":[164],"object,":[165],"process":[168],"at":[169],"same":[171],"time,":[172],"architecture":[175],"application":[178],"different":[180],"system":[181],"platforms.":[182],"Finally,":[183],"present":[185],"summary":[190],"current":[192],"challenges":[193],"corresponding":[195],"solutions":[196],"field.":[199],"provides":[202],"an":[203],"in-depth":[204],"detection":[208],"technologies":[209],"based":[210],"execution,":[213],"serving":[214],"valuable":[217],"guide":[218],"researchers":[220],"this":[222],"domain.":[223]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
