Guiding Dynamic Symbolic Execution toward Unverified Program Executions
1 They guide DSE to parts unverified by static analysis. They said, DSE is also called concolic. Simply applying DSE in addition to other techniques leads to redundancy when executions covered by DSE have already been verified using other techniques. Good thought.
Sergey Vartanov, 2007–2020