Overview

City University of Hong Kong appears in the provided evidence as the institutional affiliation of Sirui He and Cong Wang, who are listed as co-authors of the paper “MorFuzz: Fuzzing Processor via Runtime Instruction Morphing enhanced Synchronizable Co-simulation.” The paper was included in the Proceedings of the 32nd USENIX Security Symposium, held August 9–11, 2023 in Anaheim, California, USA.

Research association in the evidence

The cited MorFuzz paper lists its authors as Jinyan Xu and Yiyuan Liu of Zhejiang University; Sirui He of City University of Hong Kong; Haoran Lin and Yajin Zhou of Zhejiang University; and Cong Wang of City University of Hong Kong. The author block also gives City University of Hong Kong email affiliations for Sirui He and Cong Wang.

Technical context: MorFuzz

The paper proposes MorFuzz, described as a processor fuzzer intended to discover software-triggerable hardware bugs. Its core idea is to use runtime information to generate instruction streams with valid formats and meaningful semantics. The paper describes MorFuzz as using a new input structure with multi-level runtime mutation primitives, an instruction morphing technique for dynamic instruction mutation, and a state synchronization technique within an extended co-simulation framework.

Evaluation reported in the cited work

The MorFuzz evaluation described in the evidence covers three open-source RISC-V processors: CVA6, Rocket, and BOOM. The paper reports discovering 17 new bugs, with 13 CVEs assigned.