Jul 2026
Directed Symbolic Execution for Vulnerability Discovery: An LLM-Guided Approach in KLEE
KLEECopilot, a Large Language Model-guided directed symbolic execution approach built on KLEE, exhibits only marginal sensitivity to model scale, supporting the efficacy of integrating security semantics and loop-exit prioritization.
Lingfeng Chen, Tao Xiao, Masanari Kondo et al.
· arXiv.org · 0 citations