ASE 2026
Mon 12 - Fri 16 October 2026 Munich, Germany

Following four successful KLEE workshops (2018, 2021, 2022 and 2024), which have brought together over 450 participants from six different continents spanning academia, industry and government, one of the main goals of the KLEE 2026 workshop is to get together symbolic execution researchers, KLEE developers and KLEE users to exchange ideas, understand each other’s interests and needs, and discuss the evolution of symbolic execution technology. A particular emphasis will be placed on connecting academic researchers working with KLEE and symbolic execution with industrial users interested in using KLEE to improve their software products.

While a particular emphasis will be placed on the KLEE ecosystem, the workshop will more broadly discuss recent developments in symbolic execution and related areas, such as fuzzing and constraint solving.

Please visit https://srg.doc.ic.ac.uk/klee26/ for more information.

Plenary
You're viewing the program in a time zone which is different from your device's time zone change time zone

Fri 16 Oct

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

08:45 - 10:00
Opening Remarks and KeynoteKLEE at Forum 8
Chair(s): Cristian Cadar Imperial College London
08:45
15m
Day opening
Opening Remarks
KLEE
Cristian Cadar Imperial College London
09:00
60m
Keynote
Deriving Test Oracles for Verification Infrastructure
KLEE
10:30 - 10:50
Poster PresentationsKLEE at Forum 8
Chair(s): Frank Busse Independent Researcher
10:30
5m
Poster
Automatic Unit-Test Generation Based on Symbolic Execution
KLEE
Tigran Avagyan RAU, Levon Shahbazyan Center of Advanced Software Technologies, Russian-Armenian University, Hovhannes Movsisyan RAU, Hayk Aslanyan RAU
10:35
5m
Poster
EAR: Debugging Libraries through API Call Traces
KLEE
Tongjun Zhang Imperial College London, Cristian Cadar Imperial College London
10:40
5m
Poster
Interprocedural Symbolic Static Analysis for Go
KLEE
10:50 - 12:30
Exploration Strategies for Symbolic ExecutionKLEE at Forum 8
Chair(s): Frank Busse Independent Researcher
10:50
20m
Talk
FeatMaker: Automated Feature Engineering for Search Strategy of Symbolic Execution
KLEE
Jaehan Yoon Sungkyunkwan University, Sooyoung Cha Sungkyunkwan University
11:10
20m
Talk
Guiding Symbolic Execution with Static Analysis and LLMs for Vulnerability Discovery
KLEE
Md Shafiuzzaman University of California at Santa Barbara, Achintya Desai UCSB, Wenbo Guo University of California, Santa Barbara, Tevfik Bultan University of California at Santa Barbara
11:30
20m
Talk
Enhancing Symbolic Execution of Programs for Control Flow Path Feasibility Analysis
KLEE
11:50
20m
Talk
Enhancing Symbolic Execution with Self-Configuring Parameters
KLEE
Minjong Kim Sungkyunkwan University, Sooyoung Cha Sungkyunkwan University
12:10
20m
Talk
Triggering the Hidden: Oracle Design Meets KLEE for Backdoor Detection
KLEE
Michaël Marcozzi Université Paris-Saclay; CEA List
12:30 - 14:00
14:00 - 16:00
LLMs, Specifications and Proofs with and for Symbolic ExecutionKLEE at Forum 8
Chair(s): Daniel Schemmel
14:00
20m
Poster
Extended Lunch Poster Session
KLEE

14:20
20m
Talk
Defusing Logic Bombs in Symbolic Execution with LLM-Generated Ghost Code
KLEE
Dimitrios Stamatios Bouras Peking University, Sergey Mechtaev Peking University
14:40
20m
Talk
Enhancing Symbolic Execution with Machine-Checked Safety Proofs
KLEE
David Trabish National University of Singapore, Shachar Itzhaky Technion
15:00
20m
Talk
Agentic Concolic Execution
KLEE
Zhengxiong Luo National University of Singapore, Huan Zhao National University of Singapore, Dylan Wolff National University of Singapore, Cristian Cadar Imperial College London, Abhik Roychoudhury National University of Singapore
15:20
20m
Talk
LLM-Driven Generation of Summaries for Symbolic Execution
KLEE
Frederico Ramos Instituto Superior Técnico, João Matos Instituto Superior Técnico, Jorge Hristovsky Instituto Superior Técnico, Pedro Adão IST-ULisboa and Instituto de Telecomunicações, Ruben Martins Carnegie Mellon University, José Fragoso Santos INESC-ID; Instituto Superior Técnico - University of Lisbon
15:40
20m
Talk
A Case Study in Firmware Verification: Applying Formal Methods to Intel TDX Module
KLEE
Dirk Beyer LMU Munich, Po-Chun Chien LMU Munich, Bo-Yuan Huang Intel, USA, Nian-Ze Lee National Taiwan University, Taiwan, Thomas Lemberger Technische Hochschule Deggendorf
16:30 - 17:35
Keynote and Closing RemarksKLEE at Forum 8
Chair(s): Cristian Cadar Imperial College London
16:30
60m
Keynote
The Role of SAT Solving in Automated Reasoning
KLEE
Armin Biere University of Freiburg, Germany
17:30
5m
Day closing
Closing Remarks
KLEE
Cristian Cadar Imperial College London

Accepted Papers

Title
A Case Study in Firmware Verification: Applying Formal Methods to Intel TDX Module
KLEE
Agentic Concolic Execution
KLEE
Automatic Unit-Test Generation Based on Symbolic Execution
KLEE
Defusing Logic Bombs in Symbolic Execution with LLM-Generated Ghost Code
KLEE
EAR: Debugging Libraries through API Call Traces
KLEE
Enhancing Symbolic Execution of Programs for Control Flow Path Feasibility Analysis
KLEE
Enhancing Symbolic Execution with Machine-Checked Safety Proofs
KLEE
Enhancing Symbolic Execution with Self-Configuring Parameters
KLEE
FeatMaker: Automated Feature Engineering for Search Strategy of Symbolic Execution
KLEE
Guiding Symbolic Execution with Static Analysis and LLMs for Vulnerability Discovery
KLEE
Interprocedural Symbolic Static Analysis for Go
KLEE
LLM-Driven Generation of Summaries for Symbolic Execution
KLEE
Triggering the Hidden: Oracle Design Meets KLEE for Backdoor Detection
KLEE

Call for Presentations and Posters

Please see the Call for Presentations and the Call for Posters on the KLEE 2026 website.