Misha Zitser Richard Lippmann Tim Leek Testing static analysis tools using exploitable buffer overflows from open source code. 97-106 2004 conf/sigsoft/2004 SIGSOFT FSE http://doi.acm.org/10.1145/1029894.1029911 db/conf/sigsoft/fse2004.html#ZitserLL04