Regular property guided dynamic symbolic execution
Symbolic PathFinder: symbolic execution of Java bytecode