1. A hybrid string constructor, comprising: a database configured to store a set of known concretizations; and a processor configured to compare the one or more string components to the set of known concretizations to determine string components from input string information that may be represented concretely, to abstract all string components that could not be represented concretely, and to create a hybrid string representation that includes at least one concrete string component and at least one abstracted string component, wherein the set of known concretizations includes string configurations that cannot be interfered with by an attacker.