Binary Analysis Tools Finding valid inputs by analyzing number of instructions executed Finding input size by analyzing difference in delta of instructions executed as input increases Find the expected protocol (order of input strings) with the discovered input strings