control + data flow model directed inputs generation b . approximate taint flow inference .
GramFuzz: Fuzzing testing of web browsers based on grammar analysis and structural mutation