This work presents two new algorithms for bit-vector programs: a strategically guided linear search that exploits the lattice structure and a bitwise greedy approach that resolves bound bits from high to low with a solver-call count linear in bit-width.
Abstract
Synthesizing best inductive invariants (BII) is fundamental to program analysis and verification, yet existing approaches face significant efficiency challenges. We introduce a new formulation for the problem through the lens of mathematical optimization over quantified constraints in first-order theories. The formulation offers a constructive and operational perspective on the BII problem and opens new algorithmic avenues. Building on this formulation, we present two new algorithms for bit-vector programs: a strategically guided linear search that exploits the lattice structure and a bitwise greedy approach that resolves bound bits from high to low with a solver-call count linear in bit-width. We evaluate our approach on a comprehensive benchmark suite, demonstrating significant performance improvements over conventional methods based on symbolic abstraction and chaotic iteration. Experimental results demonstrate our approach solves up to 86\% more benchmarks than baseline methods, with improved scaling in solver-call count for high bit-widths and improved verification effectiveness when integrated with k-induction.
A novel variation of high-effort logic synthesis called transduction is presented, which performs transformation and reduction using don’t-cares to restructure the circuit.
Yukio Miyasaka, Alan Mishchenko, John Wawrzynek et al.· 0 citations
Code obfuscation is a fundamental technique for software protection and intellectual property defense, yet its effectiveness has been increasingly undermined by advances in symbolic execution and automated deobfuscation. Existing countermeasures based on path explosion, path divergence, or complex constraints suffer...
Mo-Xuan Wang, Hai-Yan Hu, Hao-Hang Qin et al.· Journal of computing and sec...· 0 citations
The proposed SymDict, a hybrid fuzzing system based on symbolic dictionaries, reduces redundant symbolic execution by performing constraint solving only at uncovered branches in frontier basic blocks, and partitions constraint sets into solvable subsets, combines solutions with offset information to create symbolic dic...
Chengyu Fei, Jia-Jun Sun, Donghai Tian et al.· International Conference on...· 0 citations
Formal hardware information-flow verification (IFV) provides strong guarantees against secret-dependent timing and control behavior, but often scales poorly on realistic RTL. We identify two recurring proof barriers in self-composed IFV: implementation complexity, where proof-hard datapath logic dominates even though t...
Liangtao Dai, Yimin Gao, Melika Morsali et al.· 0 citations
This paper introduces AESAT (Auto-Evolving SAT solving), a novel neuro-symbolic framework designed to automatically evolve and optimize the heuristic functions of SAT solvers, and represents the first time an LLM-enhanced solver has dominated the world's premier SAT competition.
Mao Luo, Hang Ding, Chumin Li et al.· Proceedings of the Thirty-Fi...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.