Directed test generation using symbolic grammars
Korat: automated testing based on Java predicates