All you ever wanted to know about dynamic taint analysis and forward symbolic execution (but might have been afraid to ask). (2010)

by E J SCHWARTZ, T AVGERINOS, D BRUMLEY
Venue:In Proceedings of the 2010 IEEE Symposium on Security and Privacy