1. Korat
2. Combining symbolic execution and search-based testing for programs with complex heap inputs
3. Symbolic execution of programs with heap inputs
4. JBSE: a symbolic executor for Java programs with complex heap inputs
5. Cristian Cadar , Daniel Dunbar , and Dawson R. Engler . 2008 . KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs. In 8th USENIX Symposium on Operating Systems Design and Implementation, OSDI 2008, December 8-10, 2008, San Diego, California, USA , Proceedings, Richard Draves and Robbert van Renesse (Eds.). USENIX Association , 209–224. http://www.usenix.org/events/osdi08/tech/full_papers/cadar/cadar.pdf Cristian Cadar, Daniel Dunbar, and Dawson R. Engler. 2008. KLEE: Unassisted and Automatic Generation of High-Coverage Tests for Complex Systems Programs. In 8th USENIX Symposium on Operating Systems Design and Implementation, OSDI 2008, December 8-10, 2008, San Diego, California, USA, Proceedings, Richard Draves and Robbert van Renesse (Eds.). USENIX Association, 209–224. http://www.usenix.org/events/osdi08/tech/full_papers/cadar/cadar.pdf