Comparison of Search Strategies of KLEE Concolic Testing Tool
Young-Joo Kim, Moon-Zoo Kim, Yunho Kim, Ui-June Jung · 2012
Concolic (Concrete+symbolic) testing is an automated test case generation technique that works on target source code. This paper analyzes the branch coverage performances of the search strategies of a Concolic testing tool KLEE. In addition, we implemented the breadth first search (BFS) strategy to get higher branch coverage in KLEE. To compare the effectiveness of the search strategies, we applied KLEE to GNU Coreutils version S.9 and compared the branch coverage of these search strategies and analyze their results.