{"id":"https://openalex.org/W4410584306","doi":"https://doi.org/10.23919/date64628.2025.10993257","title":"Accurate and Extensible Symbolic Execution of Binary Code Based on Formal ISA Semantics","display_name":"Accurate and Extensible Symbolic Execution of Binary Code Based on Formal ISA Semantics","publication_year":2025,"publication_date":"2025-03-31","ids":{"openalex":"https://openalex.org/W4410584306","doi":"https://doi.org/10.23919/date64628.2025.10993257"},"language":"en","primary_location":{"id":"doi:10.23919/date64628.2025.10993257","is_oa":false,"landing_page_url":"https://doi.org/10.23919/date64628.2025.10993257","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 Design, Automation & Test in Europe Conference (DATE)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012972830","display_name":"S\u00f6ren Tempel","orcid":"https://orcid.org/0000-0002-3076-893X"},"institutions":[{"id":"https://openalex.org/I94509681","display_name":"Technische Universit\u00e4t Braunschweig","ror":"https://ror.org/010nsgg66","country_code":"DE","type":"education","lineage":["https://openalex.org/I94509681"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"S\u00f6ren Tempel","raw_affiliation_strings":["Institute of Operating Systems and Computer Networks, Technische Universität Braunschweig,Braunschweig,Germany"],"affiliations":[{"raw_affiliation_string":"Institute of Operating Systems and Computer Networks, Technische Universität Braunschweig,Braunschweig,Germany","institution_ids":["https://openalex.org/I94509681"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021224668","display_name":"Tobias Brandt","orcid":"https://orcid.org/0000-0002-7041-4319"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tobias Brandt","raw_affiliation_strings":["Independent Researcher,Bremen,Germany"],"affiliations":[{"raw_affiliation_string":"Independent Researcher,Bremen,Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081578222","display_name":"Christoph L\u00fcth","orcid":"https://orcid.org/0000-0002-1121-398X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Christoph L\u00fcth","raw_affiliation_strings":["Cyber-Physical Systems, DFKI,Bremen,Germany"],"affiliations":[{"raw_affiliation_string":"Cyber-Physical Systems, DFKI,Bremen,Germany","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066046654","display_name":"Christian Dietrich","orcid":"https://orcid.org/0000-0001-9258-0513"},"institutions":[{"id":"https://openalex.org/I94509681","display_name":"Technische Universit\u00e4t Braunschweig","ror":"https://ror.org/010nsgg66","country_code":"DE","type":"education","lineage":["https://openalex.org/I94509681"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christian Dietrich","raw_affiliation_strings":["Institute of Operating Systems and Computer Networks, Technische Universität Braunschweig,Braunschweig,Germany"],"affiliations":[{"raw_affiliation_string":"Institute of Operating Systems and Computer Networks, Technische Universität Braunschweig,Braunschweig,Germany","institution_ids":["https://openalex.org/I94509681"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071742136","display_name":"Rolf Drechsler","orcid":"https://orcid.org/0000-0002-9872-1740"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rolf Drechsler","raw_affiliation_strings":["Cyber-Physical Systems, DFKI,Bremen,Germany"],"affiliations":[{"raw_affiliation_string":"Cyber-Physical Systems, DFKI,Bremen,Germany","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5012972830"],"corresponding_institution_ids":["https://openalex.org/I94509681"],"apc_list":null,"apc_paid":null,"fwci":2.4101,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.86302359,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9506999850273132,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9506999850273132,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9329000115394592,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10679","display_name":"Service-Oriented Architecture and Web Services","score":0.9293000102043152,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8264294862747192},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.7883512377738953},{"id":"https://openalex.org/keywords/extensibility","display_name":"Extensibility","score":0.6766399145126343},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.6642166376113892},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.6298439502716064},{"id":"https://openalex.org/keywords/formal-semantics","display_name":"Formal semantics (linguistics)","score":0.5938783884048462},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.5114189982414246},{"id":"https://openalex.org/keywords/formal-methods","display_name":"Formal methods","score":0.46224451065063477},{"id":"https://openalex.org/keywords/operational-semantics","display_name":"Operational semantics","score":0.4227164089679718},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.41764742136001587},{"id":"https://openalex.org/keywords/formal-specification","display_name":"Formal specification","score":0.4107632040977478},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3611834645271301},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3248523473739624},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.15216273069381714},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.1312161386013031}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8264294862747192},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.7883512377738953},{"id":"https://openalex.org/C32833848","wikidata":"https://www.wikidata.org/wiki/Q4115054","display_name":"Extensibility","level":2,"score":0.6766399145126343},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.6642166376113892},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.6298439502716064},{"id":"https://openalex.org/C146499914","wikidata":"https://www.wikidata.org/wiki/Q5469969","display_name":"Formal semantics (linguistics)","level":2,"score":0.5938783884048462},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.5114189982414246},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.46224451065063477},{"id":"https://openalex.org/C156325763","wikidata":"https://www.wikidata.org/wiki/Q1930895","display_name":"Operational semantics","level":3,"score":0.4227164089679718},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.41764742136001587},{"id":"https://openalex.org/C116253237","wikidata":"https://www.wikidata.org/wiki/Q1437424","display_name":"Formal specification","level":2,"score":0.4107632040977478},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3611834645271301},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3248523473739624},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.15216273069381714},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.1312161386013031}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/date64628.2025.10993257","is_oa":false,"landing_page_url":"https://doi.org/10.23919/date64628.2025.10993257","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 Design, Automation & Test in Europe Conference (DATE)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W17195072","https://openalex.org/W49922133","https://openalex.org/W610253872","https://openalex.org/W1439634531","https://openalex.org/W1480909796","https://openalex.org/W1984041362","https://openalex.org/W2091355737","https://openalex.org/W2100424584","https://openalex.org/W2137530017","https://openalex.org/W2141576692","https://openalex.org/W2143485404","https://openalex.org/W2156858199","https://openalex.org/W2170371367","https://openalex.org/W2514974017","https://openalex.org/W2767373589","https://openalex.org/W2791403216","https://openalex.org/W2899599233","https://openalex.org/W2945462412","https://openalex.org/W2963723316","https://openalex.org/W2989703616","https://openalex.org/W3033606455","https://openalex.org/W3184568883","https://openalex.org/W3196027996","https://openalex.org/W3211661085","https://openalex.org/W4220856780","https://openalex.org/W4234650230","https://openalex.org/W4239031877","https://openalex.org/W4281916531","https://openalex.org/W4293177352","https://openalex.org/W4293812490","https://openalex.org/W4321381226","https://openalex.org/W4386206422","https://openalex.org/W4386316895","https://openalex.org/W4387445812","https://openalex.org/W4389164816","https://openalex.org/W6637594488","https://openalex.org/W6637688222","https://openalex.org/W6683303659","https://openalex.org/W6753913213","https://openalex.org/W6753913816"],"related_works":["https://openalex.org/W2385508105","https://openalex.org/W2073736684","https://openalex.org/W2013028647","https://openalex.org/W2124431509","https://openalex.org/W60938034","https://openalex.org/W2790733222","https://openalex.org/W1498867194","https://openalex.org/W3183513857","https://openalex.org/W3038077494","https://openalex.org/W3021477639"],"abstract_inverted_index":{"Symbolic":[0,10],"execution":[1,11,33,137],"is":[2],"an":[3,47,105,142,175],"SMT-based":[4],"software":[5,17,25],"verification":[6],"and":[7,52,74,96,156],"testing":[8],"technique.":[9],"requires":[12],"tracking":[13],"performed":[14],"computations":[15,38],"during":[16],"simulation":[18],"to":[19,43,46,66,104,115,161,169],"reason":[20],"about":[21],"branches":[22],"in":[23,93,119,183,191],"the":[24,41,59,67,79,85,102,110,129,153,184,192,196],"under":[26],"test.":[27],"The":[28,76],"prevailing":[29],"approach":[30],"on":[31],"symbolic":[32,136,199],"of":[34,78,101,112,131,138,145,186,195],"binary":[35,68,80,139],"code":[36,42,81],"tracks":[37],"by":[39,84],"transforming":[40],"be":[44,63,166],"tested":[45],"architecture-independent":[48],"intermediate":[49],"representation":[50,144],"(IR)":[51],"then":[53],"symbolically":[54],"executes":[55],"this":[56,71],"IR.":[57,106],"However,":[58],"resulting":[60],"IR":[61],"must":[62],"semantically":[64],"equivalent":[65],"code,":[69,140],"making":[70],"process":[72],"complex":[73],"error-prone.":[75],"semantics":[77,118,134],"are":[82],"specified":[83],"targeted":[86],"instruction":[87,146],"set":[88],"architecture":[89],"(ISA),":[90],"commonly":[91],"given":[92],"natural":[94],"language":[95],"requiring":[97],"a":[98,120,150,158],"manual":[99],"implementation":[100,194],"transformation":[103],"In":[107],"recent":[108],"years,":[109],"use":[111],"formal":[113,133],"languages":[114],"describe":[116],"ISA":[117,155,193],"machine-readable":[121],"way":[122],"has":[123],"gained":[124],"increased":[125],"popularity.":[126],"We":[127,148],"investigate":[128],"utilization":[130],"such":[132],"for":[135,152],"achieving":[141],"accurate":[143],"semantics.":[147],"present":[149],"prototype":[151],"RISC-V":[154],"conduct":[157],"case":[159],"study":[160],"demonstrate":[162],"that":[163],"it":[164],"can":[165],"easily":[167],"extended":[168],"additional":[170],"instructions.":[171],"Furthermore,":[172],"we":[173],"perform":[174],"experimental":[176],"comparison":[177],"with":[178],"prior":[179],"work":[180],"which":[181],"resulted":[182],"discovery":[185],"five":[187],"previously":[188],"unknown":[189],"bugs":[190],"popular":[197],"IR-based":[198],"executor":[200],"angr.":[201]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}