Automatic Patch-Based Exploit Generation is Possible: Techniques and Implications
Korat: automated testing based on Java predicates