Dowser: a guided fuzzer to find buffer overflow vulnerabilities [pdf]
few.vu.nl