All You Ever Wanted to Know about Dynamic Taint Analysis and Forward Symbolic Execution (but Might Have Been Afraid to Ask).

Edward J. Schwartz, Thanassis Avgerinos, David Brumley

Browse the full SP paper archive.