Taint-based directed whitebox fuzzing
An Empirical Study of the Reliability of UNIX Utilities