Improving function coverage with munch: a hybrid fuzzing and directed symbolic execution approach
Model-based whitebox fuzzing for program binaries