FieldFuzz: Stateful Fuzzing of Proprietary Industrial Controllers using Injected Ghosts