{"id":"https://openalex.org/W7165886740","doi":"https://doi.org/10.4230/darts.12.1.10","title":"Efficient Symbolic Execution of Software under Fault Attacks (Artifact)","display_name":"Efficient Symbolic Execution of Software under Fault Attacks (Artifact)","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7165886740","doi":"https://doi.org/10.4230/darts.12.1.10"},"language":"en","primary_location":{"id":"doi:10.4230/darts.12.1.10","is_oa":true,"landing_page_url":"https://doi.org/10.4230/darts.12.1.10","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"DataPaper"},"type":"data-paper","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.4230/darts.12.1.10","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5107318973","display_name":"Y. Fang","orcid":"https://orcid.org/0000-0002-4933-7443"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fang, Yuzhou","raw_affiliation_strings":["University of Southern California, Los Angeles, CA, USA"],"raw_orcid":"https://orcid.org/0000-0002-4933-7443","affiliations":[{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133384636","display_name":"Chenyu Zhou","orcid":"https://orcid.org/0009-0006-8493-6886"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhou, Chenyu","raw_affiliation_strings":["University of Southern California, Los Angeles, CA, USA"],"raw_orcid":"https://orcid.org/0009-0006-8493-6886","affiliations":[{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100456758","display_name":"Jingbo Wang","orcid":"https://orcid.org/0000-0001-5877-2677"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wang, Jingbo","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":"https://orcid.org/0000-0001-5877-2677","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101934907","display_name":"Chao Wang","orcid":"https://orcid.org/0009-0003-4684-3943"},"institutions":[{"id":"https://openalex.org/I1174212","display_name":"University of Southern California","ror":"https://ror.org/03taz7m60","country_code":"US","type":"education","lineage":["https://openalex.org/I1174212"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wang, Chao","raw_affiliation_strings":["University of Southern California, Los Angeles, CA, USA"],"raw_orcid":"https://orcid.org/0009-0003-4684-3943","affiliations":[{"raw_affiliation_string":"University of Southern California, Los Angeles, CA, USA","institution_ids":["https://openalex.org/I1174212"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.4632999897003174,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.4632999897003174,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.19210000336170197,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.13019999861717224,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.7148000001907349},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.5450000166893005},{"id":"https://openalex.org/keywords/fault-model","display_name":"Fault model","score":0.5343999862670898},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5310999751091003},{"id":"https://openalex.org/keywords/fault-injection","display_name":"Fault injection","score":0.5167999863624573},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.515500009059906},{"id":"https://openalex.org/keywords/fault","display_name":"Fault (geology)","score":0.4810999929904938},{"id":"https://openalex.org/keywords/program-analysis","display_name":"Program analysis","score":0.4781999886035919},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.4717000126838684},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4706999957561493}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.770799994468689},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.7148000001907349},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.5450000166893005},{"id":"https://openalex.org/C167391956","wikidata":"https://www.wikidata.org/wiki/Q1401211","display_name":"Fault model","level":3,"score":0.5343999862670898},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5310999751091003},{"id":"https://openalex.org/C2775928411","wikidata":"https://www.wikidata.org/wiki/Q2041312","display_name":"Fault injection","level":3,"score":0.5167999863624573},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.515500009059906},{"id":"https://openalex.org/C175551986","wikidata":"https://www.wikidata.org/wiki/Q47089","display_name":"Fault (geology)","level":2,"score":0.4810999929904938},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.4781999886035919},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.4717000126838684},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4706999957561493},{"id":"https://openalex.org/C50712370","wikidata":"https://www.wikidata.org/wiki/Q4269346","display_name":"Software fault tolerance","level":3,"score":0.4562000036239624},{"id":"https://openalex.org/C126953365","wikidata":"https://www.wikidata.org/wiki/Q5438152","display_name":"Fault coverage","level":3,"score":0.4514000117778778},{"id":"https://openalex.org/C11219265","wikidata":"https://www.wikidata.org/wiki/Q5158734","display_name":"Concolic testing","level":4,"score":0.41659998893737793},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.40939998626708984},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.37560001015663147},{"id":"https://openalex.org/C65620979","wikidata":"https://www.wikidata.org/wiki/Q7661176","display_name":"Symbolic data analysis","level":2,"score":0.3749000132083893},{"id":"https://openalex.org/C13625343","wikidata":"https://www.wikidata.org/wiki/Q7627418","display_name":"Stuck-at fault","level":4,"score":0.36039999127388},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3481999933719635},{"id":"https://openalex.org/C23123167","wikidata":"https://www.wikidata.org/wiki/Q7661193","display_name":"Symbolic trajectory evaluation","level":3,"score":0.3452000021934509},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.34139999747276306},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.33739998936653137},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.33739998936653137},{"id":"https://openalex.org/C2778361913","wikidata":"https://www.wikidata.org/wiki/Q7248437","display_name":"Program transformation","level":2,"score":0.32510000467300415},{"id":"https://openalex.org/C204241405","wikidata":"https://www.wikidata.org/wiki/Q461499","display_name":"Transformation (genetics)","level":3,"score":0.31859999895095825},{"id":"https://openalex.org/C108010975","wikidata":"https://www.wikidata.org/wiki/Q500094","display_name":"Pruning","level":2,"score":0.31470000743865967},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.3109999895095825},{"id":"https://openalex.org/C154488198","wikidata":"https://www.wikidata.org/wiki/Q1335007","display_name":"Embedded software","level":3,"score":0.29670000076293945},{"id":"https://openalex.org/C2989134064","wikidata":"https://www.wikidata.org/wiki/Q288510","display_name":"Execution time","level":2,"score":0.29499998688697815},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.289000004529953},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.28760001063346863},{"id":"https://openalex.org/C164155591","wikidata":"https://www.wikidata.org/wiki/Q2067766","display_name":"Satisfiability modulo theories","level":2,"score":0.2728999853134155},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.2721000015735626},{"id":"https://openalex.org/C63540848","wikidata":"https://www.wikidata.org/wiki/Q3140932","display_name":"Fault tolerance","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2660999894142151},{"id":"https://openalex.org/C117447612","wikidata":"https://www.wikidata.org/wiki/Q1412670","display_name":"Software quality","level":4,"score":0.26570001244544983}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.4230/darts.12.1.10","is_oa":true,"landing_page_url":"https://doi.org/10.4230/darts.12.1.10","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"DataPaper"}],"best_oa_location":{"id":"doi:10.4230/darts.12.1.10","is_oa":true,"landing_page_url":"https://doi.org/10.4230/darts.12.1.10","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"DataPaper"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7974244952201843,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0,201],"propose":[1,71,77,150],"a":[2,35,78,211],"symbolic":[3,90,153,184,240,278],"execution":[4,154,185,241,279],"method":[5,206,222,230],"for":[6,43,160],"analyzing":[7,44],"the":[8,32,45,53,93,99,105,120,135,165,179,196,204,225,235,251,264,273],"safety":[9,33,260],"of":[10,34,47,183,213,239],"software":[11,36],"under":[12],"fault":[13,60,64,80,110,145,162],"attacks":[14,20],"both":[15],"accurately":[16,97],"and":[17,62,133,207,262],"efficiently.":[18],"Fault":[19],"leverage":[21],"physically":[22],"injected":[23,49,106],"hardware":[24,50],"faults":[25,51],"in":[26,131,186,189],"an":[27,151],"embedded":[28,54],"system":[29],"to":[30,88,92,96,127,173,250,257,272],"break":[31],"program.":[37,167],"While":[38],"there":[39],"are":[40],"existing":[41,117],"methods":[42],"impact":[46],"maliciously":[48],"on":[52,164,210],"software,":[55],"they":[56],"suffer":[57],"from":[58],"inaccurate":[59],"modeling":[61,81,111],"inefficient":[63],"analysis.":[65],"To":[66],"overcome":[67],"these":[68],"limitations,":[69],"we":[70,76,149],"two":[72,114,170],"novel":[73],"techniques.":[74,227],"First,":[75],"new":[79,100,109],"technique":[82],"that":[83,156,220],"leverages":[84,169],"automated":[85],"program":[86,101,122,138,199],"transformation":[87],"add":[89],"variables":[91],"original":[94],"program,":[95],"model":[98],"behavior":[102,123],"induced":[103],"by":[104,142,195],"faults.":[107],"This":[108],"approach":[112],"has":[113],"advantages":[115],"over":[116],"techniques:":[118],"(a)":[119],"fault-induced":[121,198],"is":[124,157,178,193,255],"closely":[125],"related":[126],"what":[128],"attackers":[129],"exploit":[130],"practice":[132],"(b)":[134],"automatically":[136],"transformed":[137,166],"may":[139],"be":[140,282],"analyzed":[141],"any":[143],"downstream":[144],"analysis":[146,163],"algorithm.":[147],"Second,":[148],"efficient":[152],"algorithm":[155,280],"designed":[158],"specifically":[159],"conducting":[161],"It":[168],"pruning":[171],"techniques":[172],"mitigate":[174],"path":[175],"explosion,":[176],"which":[177],"main":[180],"performance":[181],"bottleneck":[182],"general":[187],"and,":[188],"this":[190],"particular":[191],"application,":[192],"exacerbated":[194],"additional":[197],"behavior.":[200],"have":[202],"implemented":[203],"proposed":[205],"evaluated":[208],"it":[209,254],"variety":[212],"benchmark":[214],"programs.":[215],"The":[216],"experimental":[217],"results":[218],"show":[219],"our":[221,229,276],"significantly":[223],"outperforms":[224],"state-of-the-art":[226],"Specifically,":[228],"not":[231],"only":[232],"drastically":[233],"reduces":[234],"overall":[236],"running":[237],"time":[238,266],"but":[242],"also":[243],"retains":[244],"its":[245],"error":[246],"detection":[247],"capabilities.":[248],"Compared":[249],"current":[252],"state-of-the-art,":[253],"able":[256],"detect":[258],"previously-missed":[259],"violations":[261],"at":[263],"same":[265],"avoid":[267],"bogus":[268],"violations.":[269],"Furthermore,":[270],"compared":[271],"baseline":[274],"algorithm,":[275],"optimized":[277],"can":[281],"orders-of-magnitude":[283],"faster.":[284]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-26T00:00:00"}