Autonomous reasoning system for vulnerability analysis

One or more non-transitory computer-readable media having encoded therein programming code executable by one or more processors to perform operations, the operations comprising:

• receiving a binary program under analysis (BPUA) derived from the deployed program;
• analyzing input/output (I/O) behavior of the deployed program;
• discovering inputs to the deployed program based on application of two or more exploration techniques to the BPUA and analysis of the I/O behavior;
• determining which of the inputs are negative inputs, the negative inputs including a portion of the inputs that trigger a response that includes a vulnerability of the deployed program;
• based on the negative inputs and triggered responses, developing a patch for the deployed program that modifies the deployed program to process at least some of the negative inputs without triggering a response that includes the vulnerability;
• and
• automatically dispatching the patch to the deployed program.