Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Improving Function Coverage with Munch: A Hybrid Fuzzing and Directed
  Symbolic Execution Approach   Fuzzing and symbolic execution are popular techniques for finding
vulnerabilities and generating test-cases for programs. Fuzzing, a blackbox
method that mutates seed input values, is generally incapable of generating
diverse inputs that exercise all paths in the program. Due to the
path-explosion problem and dependence on SMT solvers, symbolic execution may
also not achieve high path coverage. A hybrid technique involving fuzzing and
symbolic execution may achieve better function coverage than fuzzing or
symbolic execution alone. In this paper, we present Munch, an open source
framework implementing two hybrid techniques based on fuzzing and symbolic
execution. We empirically show using nine large open-source programs that
overall, Munch achieves higher (in-depth) function coverage than symbolic
execution or fuzzing alone. Using metrics based on total analyses time and
number of queries issued to the SMT solver, we also show that Munch is more
efficient at achieving better function coverage.

7
The categories of this paper are: hep-th
19
The categories of this paper are: eess
15
The categories of this paper are: nucl-ex
6
The categories of this paper are: astro-ph
21
The categories of this paper are: adap-org
23
The categories of this paper are: solv-int
27
The categories of this paper are: comp-gas
26
The categories of this paper are: bayes-an
31
The categories of this paper are: ao-sci
2
The categories of this paper are: math
11
The categories of this paper are: hep-lat
13
The categories of this paper are: quant-ph
3
The categories of this paper are: physics
5
The categories of this paper are: gr-qc
12
The categories of this paper are: nucl-th
28
The categories of this paper are: alg-geom