Here's the research paper, Automated Whitebox Fuzz Testing by Patrice Godefroid, Michael Levin, and David Molnar: "Our approach records an actual run of

Here's the research paper, Automated Whitebox Fuzz Testing by Patrice Godefroid, Michael Levin, and David Molnar: "Our approach records an actual run of the program under test on a well-formed input, symbolically evaluates the recorded trace, and gathers constraints on inputs capturing how the program uses these. The collected constraints are then negated one by one and solved with a constraint solver, producing new inputs that exercise different control paths in the program. This process is repeated with the help of a code-coverage maximizing heuristic designed to find defects as fast as possible." https://www.microsoft.com/en-us/research/wp-content/uploads/2016/09/ndss2008.pdf https://www.microsoft.com/en-us/research/wp-content/uploads/...