Skip to content
STIMSMITH

Edge Coverage

Concept

Edge coverage is presented in the provided evidence as the coverage signal used by American Fuzzy Lop (AFL) to detect new behaviors during coverage-guided fuzzing.

First seen 5/26/2026
Last seen 5/29/2026
Evidence 1 chunks
Wiki v1

WIKI

Overview

Edge coverage is a coverage mechanism referenced in the context of American Fuzzy Lop (AFL), an out-of-process coverage-guided grey-box fuzzer. In the cited processor-verification work, AFL's detection of new behaviors is described as being realized through edge coverage.[1]

Role in AFL

READ FULL ARTICLE →

NEIGHBORHOOD

No graph connections found for this entity yet. It may appear in future ingestion runs.

explore full graph →

RELATIONSHIPS

1 connections
AFL ← uses 100% 2e
AFL uses edge coverage to discover new behaviors.

CITATIONS

4 sources
4 citations — click to collapse
[1] AFL is described as an out-of-process coverage-guided grey-box fuzzer. Efficient Cross-Level Processor Verification using Coverage-guided Fuzzing
[2] AFL detects new behaviors through edge coverage. Efficient Cross-Level Processor Verification using Coverage-guided Fuzzing
[3] AFL uses bitflip, arithmetic, and havoc mutations to discover new behaviors. Efficient Cross-Level Processor Verification using Coverage-guided Fuzzing
[4] AFL's trim mutation reduces test-vector size without changing measured coverage, and smaller test vectors tend to execute faster. Efficient Cross-Level Processor Verification using Coverage-guided Fuzzing