Taint-based directed whitebox fuzzing
Grammar-based whitebox fuzzing