A fuzzer and a symbolic executor walk into a cloud

Finding bugs in programs is hard. Automating the process is even harder. We tackled the harder problem and produced two production-quality bug-finding systems: GRR, a high-throughput fuzzer, and PySymEmu (PSE), a binary symbolic executor with support for concrete inputs. From afar, fuzzing is a dumb, brute-force method that works surprisingly well, and symbolic execution is…

PDF] Learning to Fuzz from Symbolic Execution with Application to Smart Contracts

Fuzzing: Hack, Art, and Science, February 2020

Fuzzing: Hack, Art, and Science, February 2020

Example of an execution tree. Symbolic execution, then, consists of the

A Survey of Symbolic Execution Tools

Finding BIOS Vulnerabilities with Symbolic Execution and Virtual

Why symbolic execution is the leading-edge method for generating test values - DEV Community

How we identified a tcpdump vulnerability using cloud fuzzing

Fuzzing and Symbolic Execution - ppt download