enzet/symbolic-execution

Review tool classification

enzet opened this issue · 1 comments

enzet commented
Review tool classification
enzet commented

Trying to create more correct tool classification.

Instrumentators and interpreters

  • static binary rewriters or source-to-source instrumentators;
  • dynamic instrumentators or interpreters.

Solvers

  • SAT;
  • SMT.

Program analysis

  • Dynamic analysis tools:

    • within one path:
      • dynamic analysis along one execution (based on concrete input);
      • creates different inputs within one execution path (input generation);
    • path exploration:
      • based on input generation (branch alternation, dynamic symbolic execution);
      • based on input mutation (black-box, grey-box fuzzing, search-based testing).
  • Used techniques:

    • symbolic execution,
    • genetic algorithms,
    • etc.