{"id":"https://openalex.org/W7164207924","doi":"https://doi.org/10.48550/arxiv.2606.10264","title":"RECON: An LLM-Enhanced Backward Constraint Analysis Framework","display_name":"RECON: An LLM-Enhanced Backward Constraint Analysis Framework","publication_year":2026,"publication_date":"2026-06-09","ids":{"openalex":"https://openalex.org/W7164207924","doi":"https://doi.org/10.48550/arxiv.2606.10264"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.10264","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.10264","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.10264","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114467147","display_name":"Babangida Bappah","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bappah, Babangida","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138347297","display_name":"Lamine Noureddine","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Noureddine, Lamine","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138306989","display_name":"Umar Farooq","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Farooq, Umar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136798372","display_name":"Aisha Ali-Gombe","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ali-Gombe, Aisha","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.6427000164985657,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.6427000164985657,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.2922999858856201,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.01360000018030405,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.8434000015258789},{"id":"https://openalex.org/keywords/program-analysis","display_name":"Program analysis","score":0.5321000218391418},{"id":"https://openalex.org/keywords/constraint","display_name":"Constraint (computer-aided design)","score":0.4828000068664551},{"id":"https://openalex.org/keywords/constraint-programming","display_name":"Constraint programming","score":0.46860000491142273},{"id":"https://openalex.org/keywords/satisfiability-modulo-theories","display_name":"Satisfiability modulo theories","score":0.4528999924659729},{"id":"https://openalex.org/keywords/rewriting","display_name":"Rewriting","score":0.43950000405311584},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.435699999332428},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.4275999963283539},{"id":"https://openalex.org/keywords/concolic-testing","display_name":"Concolic testing","score":0.4124000072479248},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.40630000829696655}],"concepts":[{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.8434000015258789},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8109999895095825},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.5321000218391418},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.5198000073432922},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.4828000068664551},{"id":"https://openalex.org/C173404611","wikidata":"https://www.wikidata.org/wiki/Q528588","display_name":"Constraint programming","level":3,"score":0.46860000491142273},{"id":"https://openalex.org/C164155591","wikidata":"https://www.wikidata.org/wiki/Q2067766","display_name":"Satisfiability modulo theories","level":2,"score":0.4528999924659729},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.447299987077713},{"id":"https://openalex.org/C154690210","wikidata":"https://www.wikidata.org/wiki/Q1668499","display_name":"Rewriting","level":2,"score":0.43950000405311584},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.435699999332428},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.4275999963283539},{"id":"https://openalex.org/C11219265","wikidata":"https://www.wikidata.org/wiki/Q5158734","display_name":"Concolic testing","level":4,"score":0.4124000072479248},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.40630000829696655},{"id":"https://openalex.org/C2780069185","wikidata":"https://www.wikidata.org/wiki/Q7977945","display_name":"Equivalence (formal languages)","level":2,"score":0.40400001406669617},{"id":"https://openalex.org/C2779818221","wikidata":"https://www.wikidata.org/wiki/Q837330","display_name":"Bytecode","level":3,"score":0.3952000141143799},{"id":"https://openalex.org/C195344581","wikidata":"https://www.wikidata.org/wiki/Q2555318","display_name":"Automated reasoning","level":2,"score":0.38510000705718994},{"id":"https://openalex.org/C176783269","wikidata":"https://www.wikidata.org/wiki/Q5164378","display_name":"Constraint logic programming","level":4,"score":0.3831999897956848},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.3716000020503998},{"id":"https://openalex.org/C37926939","wikidata":"https://www.wikidata.org/wiki/Q7449061","display_name":"Semantic equivalence","level":4,"score":0.3596000075340271},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.3537999987602234},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.32510000467300415},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.32030001282691956},{"id":"https://openalex.org/C2775955345","wikidata":"https://www.wikidata.org/wiki/Q7449071","display_name":"Semantic mapping","level":2,"score":0.2921999990940094},{"id":"https://openalex.org/C115874739","wikidata":"https://www.wikidata.org/wiki/Q825377","display_name":"Critical path method","level":2,"score":0.2867000102996826},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.27570000290870667},{"id":"https://openalex.org/C128838566","wikidata":"https://www.wikidata.org/wiki/Q275603","display_name":"Logic programming","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C148230440","wikidata":"https://www.wikidata.org/wiki/Q1172264","display_name":"Datalog","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C90312973","wikidata":"https://www.wikidata.org/wiki/Q7449052","display_name":"Semantic data model","level":2,"score":0.26759999990463257},{"id":"https://openalex.org/C2776095079","wikidata":"https://www.wikidata.org/wiki/Q489538","display_name":"The Symbolic","level":2,"score":0.2624000012874603},{"id":"https://openalex.org/C96654402","wikidata":"https://www.wikidata.org/wiki/Q5469962","display_name":"Formal equivalence checking","level":3,"score":0.25850000977516174},{"id":"https://openalex.org/C3770464","wikidata":"https://www.wikidata.org/wiki/Q775963","display_name":"Smoothing","level":2,"score":0.25780001282691956},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.2533000111579895},{"id":"https://openalex.org/C44616089","wikidata":"https://www.wikidata.org/wiki/Q30158686","display_name":"Constraint satisfaction","level":3,"score":0.25290000438690186}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.10264","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.10264","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.10264","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.10264","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.47368431091308594}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"While":[0],"traditional":[1,149,164],"techniques,":[2],"such":[3,50],"as":[4,51],"symbolic":[5,150,165],"execution,":[6,166],"provide":[7],"a":[8,73,168],"principled":[9],"foundation":[10],"for":[11,33,188],"precise":[12,97,180],"constraint":[13,80],"reasoning":[14,126],"in":[15,68,201,215],"program":[16,44,89],"analysis,":[17],"they":[18],"struggle":[19],"to":[20,22,28,95,114,127,207],"scale":[21],"modern":[23],"software":[24],"systems":[25],"mainly":[26],"due":[27],"path":[29,109],"explosion,":[30],"the":[31,37,85,115,208],"need":[32],"function":[34],"modeling,":[35],"and":[36,58,123,145,176,181,214],"loss":[38],"of":[39,87,210],"semantic":[40,93,203],"intent":[41],"at":[42],"low-level":[43],"representations.":[45],"In":[46],"complex":[47,217],"execution":[48,98,151,209,221],"environments":[49],"Android,":[52],"characterized":[53],"by":[54],"extensive":[55],"framework":[56,82],"interactions":[57],"event-driven":[59],"behavior,":[60],"these":[61],"limitations":[62],"are":[63],"even":[64],"more":[65,179],"amplified.":[66],"Thus,":[67],"this":[69],"paper,":[70],"we":[71],"present":[72],"novel":[74],"large":[75],"language":[76],"model":[77],"(LLM)-enhanced":[78],"backward":[79,108],"analysis":[81,90,190],"that":[83,157,205],"combines":[84],"precision":[86],"static":[88],"with":[91,148,167],"LLM's":[92],"understanding":[94],"extract":[96],"constraints":[99,204,218],"from":[100,111],"Android":[101,142],"bytecode.":[102],"Our":[103],"approach,":[104],"titled":[105],"RECON,":[106],"performs":[107],"discovery":[110],"target":[112],"method(s)":[113],"application":[116],"entry":[117],"point(s),":[118],"discovers":[119],"method-level":[120],"control-flow":[121],"constraints,":[122],"leverages":[124],"LLM":[125],"transform":[128],"bytecode":[129],"conditions":[130],"into":[131],"interpretable":[132,182],"specifications.":[133],"We":[134,184],"evaluated":[135,186],"RECON":[136,187],"using":[137],"five":[138],"LLMs":[139],"across":[140,219],"78":[141],"constraint-extraction":[143],"scenarios":[144],"compared":[146],"it":[147],"on":[152,191],"real-world":[153],"applications.":[154],"Results":[155],"demonstrate":[156],"our":[158],"approach":[159],"operates":[160],"5.8X":[161],"faster":[162],"than":[163],"100%":[169],"success":[170,199],"rate,":[171],"while":[172],"maintaining":[173],"logical":[174],"equivalence":[175],"providing":[177],"significantly":[178],"output.":[183],"further":[185],"malware":[189],"100":[192],"samples.":[193],"The":[194],"results":[195],"indicate":[196],"an":[197],"84%":[198],"rate":[200],"generating":[202],"lead":[206],"dangerous":[211],"API":[212],"behaviors":[213],"detecting":[216],"multiple":[220],"paths.":[222]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-11T00:00:00"}