SOK: (State of) The Art of War: Offensive Techniques in Binary Analysis
All You Ever Wanted to Know about Dynamic Taint Analysis and Forward Symbolic Execution (but Might Have Been Afraid to Ask)