|
|
|
|
|
|
by UncleMeat
1847 days ago
|
|
|
Being thematically similar is not that interesting, if one works better than the others. Coverage guided fuzzing is eating symbolic execution and concolic testing for breakfast. It isn't even close. As much as I love these more principled approaches, the strategy of throwing bits at programs and applying careful coverage metrics is just way more effective, even for cases that seem to be hand picked for SMT-based approaches to win. |
|
|