{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,2]],"date-time":"2026-03-02T03:58:56Z","timestamp":1772423936044,"version":"3.50.1"},"reference-count":137,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2016,5,1]],"date-time":"2016-05-01T00:00:00Z","timestamp":1462060800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2016,5,1]],"date-time":"2016-05-01T00:00:00Z","timestamp":1462060800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2016,5,1]],"date-time":"2016-05-01T00:00:00Z","timestamp":1462060800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100004343","name":"SNF","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100004343","id-type":"DOI","asserted-by":"publisher"}]},{"name":"AVATAR","award":["200021_132666"],"award-info":[{"award-number":["200021_132666"]}]},{"name":"Italian PRIN","award":["2012E47TM2_006"],"award-info":[{"award-number":["2012E47TM2_006"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2016,5,1]]},"DOI":"10.1109\/tse.2015.2490067","type":"journal-article","created":{"date-parts":[[2015,10,13]],"date-time":"2015-10-13T15:29:22Z","timestamp":1444750162000},"page":"403-426","source":"Crossref","is-referenced-by-count":24,"title":["Bidirectional Symbolic Analysis for Effective Branch Testing"],"prefix":"10.1109","volume":"42","author":[{"given":"Mauro","family":"Baluda","sequence":"first","affiliation":[{"name":"Secure Software Engineering Group, Fraunhofer SIT, Darmstadt, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Giovanni","family":"Denaro","sequence":"additional","affiliation":[{"name":"Department of Informatics, Systems and Communication, Universit\u00e0 di Milano-Bicocca, Milano, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mauro","family":"Pezz\u00e8","sequence":"additional","affiliation":[{"name":"Faculty of Informatics, Universit\u00e0 della Svizzera italiana, Lugano, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/351240.351266"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/0950-5849(96)01103-2"},{"key":"ref33","first-page":"5","author":"gouraud","year":"0","journal-title":"Proc 16th IEEE Int Conf Automated Softw Eng"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1002\/stvr.402"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/s10009-009-0118-1"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1002\/stvr.294"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2007.41"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/1368088.1368099"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1155\/2008\/165709"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/QSIC.2008.22"},{"key":"ref28","first-page":"184","author":"beyer","year":"0","journal-title":"Proc 23rd Int Conf Comput Aided Verification"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2491411.2491425"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/s11219-013-9207-1"},{"key":"ref20","first-page":"209","article-title":"KLEE: Unassisted and automatic generation of high-coverage tests for complex systems programs","author":"cadar","year":"0","journal-title":"Proc of the 8th USENIX Symp on Operating Systems Design and Implementation"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.1976.233817"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/360248.360252"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065036"},{"key":"ref23","first-page":"1976","author":"dijkstra","year":"0","journal-title":"A Discipline of Programming"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2011.6100092"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/199448.199462"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2011.6100119"},{"key":"ref25","first-page":"189","article-title":"Two approaches to interprocedural data flow analysis","author":"pnueli","year":"0","journal-title":"Program Flow Analysis Theory and Applications"},{"key":"ref50","first-page":"38","article-title":"Fuzzing with code fragments","author":"holler","year":"0","journal-title":"Proc 21st USENIX Conf Security Symp"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/1007512.1007526"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22110-1_49"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/1706299.1706307"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ICSEA.2010.74"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/1831708.1831732"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-14295-6_10"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1145\/1453101.1453131"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-71209-1_12"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/11691617_10"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2011.6100094"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/1081706.1081750"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568271"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1297846.1297902"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2012.14"},{"key":"ref8","first-page":"359","author":"xie","year":"0","journal-title":"Proc 39th Annu IEEE\/IFIP Int Conf Dependable Syst Netw"},{"key":"ref49","first-page":"156","author":"grechanik","year":"0","journal-title":"Proc Int Conf Softw Eng"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2008.69"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2509136.2509553"},{"key":"ref46","author":"callahan","year":"0","journal-title":"Proc SPIN Workshop Also WVU Tech Rep NASA-IVV-96-022"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/2338965.2336765"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/1146238.1146255"},{"key":"ref47","first-page":"52","article-title":"Concrete model checking with abstract matching and refinement","author":"p?s?reanu","year":"0","journal-title":"Proc 17th Int Conf Comput Aided Verification"},{"key":"ref42","article-title":"Abstraction-guided test generation: A case study","author":"ball","year":"2003"},{"key":"ref41","first-page":"34:1","article-title":"Test input generation using dynamic programming","author":"zaeem","year":"0","journal-title":"Proc of the ACM SIGSOFT Int'l Symp on the Foundations of Softw Eng"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2004.1317455"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/11561163_1"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1145\/2103656.2103673"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33386-6_14"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1007\/11513988_47"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-75596-8_18"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/1390630.1390662"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/1273463.1273484"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1145\/1108792.1108813"},{"key":"ref71","first-page":"829","author":"peng","year":"0","journal-title":"Proc 23rd USENIX Secur Symp"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37036-6_9"},{"key":"ref70","first-page":"272","article-title":"Marple: A demand-driven path-sensitive buffer overflow detector","author":"soffa","year":"0","journal-title":"Proc 16th ACM SIGSOFT Int Symp Found Softw Eng"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/1062455.1062533"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15025-8_15"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1145\/1190216.1190226"},{"key":"ref74","first-page":"561","article-title":"Predictive testing: Amplifying the effectiveness of software testing","author":"joshi","year":"0","journal-title":"Proc 6th Joint Meeting Eur Softw Eng Conf \/ACM SIGSOFT Symp Found Softw Eng"},{"key":"ref75","first-page":"716","article-title":"Make test-zesti: A symbolic execution solution for improving regression testing","author":"cadar","year":"0","journal-title":"Proc 34th Int'l Conf Software Eng"},{"key":"ref133","first-page":"1977","author":"hecht","year":"0","journal-title":"Flow Analysis of Computer Programs"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1145\/115372.115320"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/LICS.1990.113767"},{"key":"ref78","first-page":"151","article-title":"Automated whitebox fuzz testing","author":"godefroid","year":"0","journal-title":"Proc 6th Annu Netw Distrib Syst Security Symp"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250769"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/1348250.1348254"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1145\/1287624.1287655"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1109\/ICST.2010.13"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2007.06.006"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/1966445.1966463"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/2491411.2491433"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31424-7_61"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/2786805.2786842"},{"key":"ref64","first-page":"134","author":"tillmann","year":"0","journal-title":"Proc of the 2nd Int Conf on Tests and Proofs"},{"key":"ref65","first-page":"15","article-title":"Combining unit-level symbolic execution and system-level concrete execution for testing NASA software","author":"p?s?reanu","year":"0","journal-title":"Proc Int'l Symp on Softw Testing and Analysis"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950396"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/SERE.2014.23"},{"key":"ref68","first-page":"235","article-title":"Katch: High-coverage testing of software patches","author":"cadar","year":"0","journal-title":"Proc European Software Eng Conf \/ACM SIGSOFT Symp Foundations of Software Eng"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1572272.1572280"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180445"},{"key":"ref1","first-page":"191","article-title":"Experiments of the effectiveness of dataflow-and controlflow-based test adequacy criteria","author":"hutchins","year":"0","journal-title":"Proc 16th Int Conf Softw Eng"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2011.93"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2015.104"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1145\/2338965.2336762"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2013.6698890"},{"key":"ref107","first-page":"188","author":"colanzi","year":"0","journal-title":"Proc 3rd Int Conf Search Based Softw Eng"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1145\/2483760.2483789"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1016\/j.cor.2007.01.015"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1145\/2001420.2001464"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24855-2_160"},{"key":"ref91","first-page":"13","article-title":"The species per path approach to search based test data generation","author":"mcminn","year":"0","journal-title":"Proc Int'l Symp on Softw Testing and Analysis"},{"key":"ref104","first-page":"2428","author":"baresel","year":"2003","journal-title":"Proc Int Conf Genetic Evol Comput PartII"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1016\/S0950-5849(01)00190-2"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1145\/271771.271792"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/ISSRE.2013.6698889"},{"key":"ref111","first-page":"8 pp.","article-title":"Evolving successful stack overflow attacks for vulnerability testing","author":"kayacik","year":"0","journal-title":"Proc 21st Annu Comput Secur Appl Conf"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/CEC.2006.1688405"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1007\/s11219-012-9174-y"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2011.6100082"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1145\/2025113.2025144"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/1389095.1389435"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2008.40"},{"key":"ref10","article-title":"DO-178C\/ED-12C: Software considerations in airborne systems and equipment certification","year":"2011"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24756-2_1"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/1127878.1127900"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/1181775.1181790"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/s10009-007-0044-z"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2010.49"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1145\/2393596.2393665"},{"key":"ref16","doi-asserted-by":"crossref","first-page":"70","DOI":"10.1007\/978-3-642-18275-4_7","author":"bradley","year":"2011","journal-title":"Proc Int Conf Verification Model Checking Abstract Interpretation"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2009.5070545"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39799-8_3"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31424-7_23"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2009.87"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/s11219-011-9150-y"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1145\/1390630.1390636"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1145\/2771783.2771802"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1808266.1808275"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2011.6100093"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1145\/1276958.1277174"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1145\/1146238.1146240"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2008.12.005"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1145\/1572272.1572288"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1145\/1276958.1277173"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1145\/2771783.2771806"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1145\/1007512.1007528"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1109\/ICSTW.2011.98"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1145\/378795.378851"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23702-7_8"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1109\/32.57624"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1002\/stvr.4370020405"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1145\/226155.226158"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/32.988709"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/7469435\/07296670.pdf?arnumber=7296670","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,18]],"date-time":"2026-02-18T21:17:34Z","timestamp":1771449454000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7296670\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,5,1]]},"references-count":137,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/tse.2015.2490067","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,5,1]]}}}