Goal and Assumption about monofuz

[pzread]

1. Is the afl-fuzzer a comparable target ? (Is it state-of-the-art)
2. What's the upper bound of the improvement ? How to estimate the upper bound ?

[pzread]

Upper Bound of The Improvement

1. Well-defined metrics for determining if the variable is monotonic.
2. How to retrieve the metrics ? Since the deep branches can't be measured before the fuzzer reaches them.
   • Use the surface branches which be measured to estimate ?
   • Derive the metrics from symbolic expressions ?