Hi Kenichi. Great presentation. Just wanted to suggest you to try using symbolic execution. It is a lot more effective than fuzzying for testing, because you don't need to make guesses. There are a lot of resources in this list. (I'm trying to use them on ns-3, but because the codebase is so big, its an absurd amount of work, but should be fine for iip)
https://github.com/ksluckow/awesome-symbolic-execution