A computer-implemented method comprising: identifying a software representation that represents actions that can be taken on a computing network, wherein the software representation was generated based on data representing the computing network, the data comprising network configuration data and network policy data , the network configuration data and the network policy data specify access rights; identifying possible attack paths in the computer network using the software representation by: selecting one or more resources or entities for protection from malicious activity; identifying locations in the software representation corresponding to the one or more resources or entities selected for protection; adding, at the locations, one or more crash statements to the software representation ; generating inputs for the software representation having the one or more crash statements, the inputs being generated using a fuzzer; and generating crash reports when any of the inputs for the software representation cause execution of any of the respective crash statements of the one or more crash statements, wherein possible attack paths are represented by sequences of function calls identified in respective crash reports generated in response to the execution of the respective crash statements. identifying a software representation that represents actions that can be taken on a computing network, wherein the software representation was generated based on data representing the computing network, the data comprising network configuration data and network policy data , the network configuration data and the network policy data specify access rights; identifying possible attack paths in the computer network using the software representation by: selecting one or more resources or entities for protection from malicious activity; identifying locations in the software representation corresponding to the one or more resources or entities selected for protection; adding, at the locations, one or more crash statements to the software representation ; generating inputs for the software representation having the one or more crash statements, the inputs being generated using a fuzzer; and generating crash reports when any of the inputs for the software representation cause execution of any of the respective crash statements of the one or more crash statements, wherein possible attack paths are represented by sequences of function calls identified in respective crash reports generated in response to the execution of the respective crash statements. selecting one or more resources or entities for protection from malicious activity; identifying locations in the software representation corresponding to the one or more resources or entities selected for protection; adding, at the locations, one or more crash statements to the software representation ; generating inputs for the software representation having the one or more crash statements, the inputs being generated using a fuzzer; and generating crash reports when any of the inputs for the software representation cause execution of any of the respective crash statements of the one or more crash statements, wherein possible attack paths are represented by sequences of function calls identified in respective crash reports generated in response to the execution of the respective crash statements. <EOS>