{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,9]],"date-time":"2026-01-09T04:46:35Z","timestamp":1767933995585,"version":"3.49.0"},"reference-count":48,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,3,31]],"date-time":"2025-03-31T00:00:00Z","timestamp":1743379200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,3,31]],"date-time":"2025-03-31T00:00:00Z","timestamp":1743379200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,3,31]]},"DOI":"10.23919\/date64628.2025.10993257","type":"proceedings-article","created":{"date-parts":[[2025,5,21]],"date-time":"2025-05-21T17:36:35Z","timestamp":1747848995000},"page":"1-7","source":"Crossref","is-referenced-by-count":1,"title":["Accurate and Extensible Symbolic Execution of Binary Code Based on Formal ISA Semantics"],"prefix":"10.23919","author":[{"given":"S\u00f6ren","family":"Tempel","sequence":"first","affiliation":[{"name":"Institute of Operating Systems and Computer Networks, Technische Universität Braunschweig,Braunschweig,Germany"}]},{"given":"Tobias","family":"Brandt","sequence":"additional","affiliation":[{"name":"Independent Researcher,Bremen,Germany"}]},{"given":"Christoph","family":"L\u00fcth","sequence":"additional","affiliation":[{"name":"Cyber-Physical Systems, DFKI,Bremen,Germany"}]},{"given":"Christian","family":"Dietrich","sequence":"additional","affiliation":[{"name":"Institute of Operating Systems and Computer Networks, Technische Universität Braunschweig,Braunschweig,Germany"}]},{"given":"Rolf","family":"Drechsler","sequence":"additional","affiliation":[{"name":"Cyber-Physical Systems, DFKI,Bremen,Germany"}]}],"member":"263","reference":[{"key":"ref1","article-title":"KLEE: Unassisted and automatic generation of high-coverage tests for complex systems programs","author":"Cadar","year":"2008","journal-title":"OSDI"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3182657"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22110-1_37"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-46681-0_17"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/sp.2016.17"},{"key":"ref6","year":"2017","journal-title":"ARM architecture reference manual. ARMv8, for ARMv8-A architecture profile"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3385412.3385964"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ase.2017.8115648"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3473572"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-38938-2_2"},{"key":"ref11","article-title":"QSYM: A practical concolic execution engine tailored for hybrid fuzzing","volume-title":"27th USENIX Security Symposium","author":"Yun","year":"2018"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3316781.3317807"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/337292.337339"},{"key":"ref14","article-title":"Ratified extensions","volume-title":"RISC-V Foundation","year":"2024"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3290384"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3607833"},{"key":"ref17","volume-title":"ISA Formal Spec Public Review"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/fmcad.2016.7886675"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-81685-8_14"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-14835-4_14"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3519939.3523434"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-99336-8_7"},{"key":"ref23","article-title":"The SMT-LIB standard version 2.6","volume-title":"Standard","author":"Barrett","year":"2021"},{"key":"ref24","article-title":"GRIFT: A richly-typed, deeply-embedded RISC-V semantics written in Haskell","volume-title":"SpISA 2019: Workshop on Instruction Set Architecture Specification","author":"Selfridge","year":"2019"},{"key":"ref25","year":"2019","journal-title":"The RISC-V instruction set manual,"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/199448.199528"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-78800-3_24"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/access.2023.3246491"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/fdl59689.2023.10272224"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2018.2815038"},{"key":"ref31","article-title":"Inception: System-wide security testing of real-world embedded systems software","volume-title":"27th USENIX Security Symposium","author":"Corteggiani","year":"2018"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.sysarc.2022.102456"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2010.12.007"},{"key":"ref34","author":"Tempel","year":"2024","journal-title":"Benchmarks for comparing binary-level symbolic execution speed"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359796"},{"key":"ref36","year":"2012","journal-title":"IEEE Standard for Stan-dard SystemC Language Reference Manual"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/1950365.1950396"},{"key":"ref38","article-title":"FIE on firmware: Finding vulnerabilities in embedded systems using symbolic execution","volume-title":"22nd USENIX Security Symposium","author":"Davidson","year":"2013"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250746"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-22110-1_13"},{"key":"ref41","article-title":"Towards verified binary raising","volume-title":"SpISA 2019: Workshop on Instruction Set Architecture Specification","author":"Hendrix","year":"2019"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3611643.3616290"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-25379-9_18"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3547628"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1016\/j.jsc.2016.07.012"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-54108-7_12"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/2450136.2450139"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.7873\/date.2015.0750"}],"event":{"name":"2025 Design, Automation & Test in Europe Conference (DATE)","location":"Lyon, France","start":{"date-parts":[[2025,3,31]]},"end":{"date-parts":[[2025,4,2]]}},"container-title":["2025 Design, Automation & Test in Europe Conference (DATE)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10992638\/10992588\/10993257.pdf?arnumber=10993257","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,22]],"date-time":"2025-05-22T05:33:29Z","timestamp":1747892009000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10993257\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3,31]]},"references-count":48,"URL":"https:\/\/doi.org\/10.23919\/date64628.2025.10993257","relation":{},"subject":[],"published":{"date-parts":[[2025,3,31]]}}}