Skip to content
STIMSMITH

Cascade: CPU Fuzzing via Intricate Program Generation

Paper

*Cascade: CPU Fuzzing via Intricate Program Generation* is a 2024 paper by Flavien Solt, Katharina Ceesay-Seitz, and Kaveh Razavi, published at the 33rd USENIX Security Symposium (USENIX Security 24). Available evidence also includes a public artifact repository with Docker-based reproduction instructions, notes on an optional Questasim experiment, and practical guidance for reproducing figures and plots.

First seen 6/10/2026
Last seen 8/19/2026
Evidence 20 chunks
Wiki v2

WIKI

Overview

Cascade: CPU Fuzzing via Intricate Program Generation is a paper by Flavien Solt, Katharina Ceesay-Seitz, and Kaveh Razavi. It was published in August 2024 at the 33rd USENIX Security Symposium (USENIX Security 24). [C1][C2]

Publication metadata

READ FULL ARTICLE →

NEIGHBORHOOD

No graph connections found for this entity yet. It may appear in future ingestion runs.

explore full graph →

RELATIONSHIPS

24 connections
Cascade introduces → 100% 6e
The Cascade paper introduces the Cascade tool for CPU fuzzing via intricate program generation.
Flavien Solt authored by → 100% 4e
Flavien Solt is listed as an author of the paper
Asymmetric ISA Pre-Simulation introduces → 100% 4e
The paper introduces asymmetric ISA pre-simulation as a novel technique
Kaveh Razavi authored by → 100% 4e
Kaveh Razavi is listed as an author of the paper
Katharina Ceesay-Seitz authored by → 100% 4e
Katharina Ceesay-Seitz is listed as an author of the paper
The Float Fight paper cites the Cascade CPU fuzzing paper.
Intricate program generation uses → 88% 2e
The phrase 'via Intricate Program Generation' indicates the method employed in the work.
DiFuzzRTL evaluates → 100% 2e
The paper evaluates DifuzzRTL as a baseline for comparison.
RFUZZ evaluates → 100% 2e
The paper evaluates RFUZZ as a baseline for comparison.
DiFuzzRTL compares with → 100% 2e
The paper compares Cascade's performance against DifuzzRTL
TheHuzz compares with → 100% 2e
The paper compares Cascade's performance against TheHuzz
RFUZZ compares with → 100% 2e
The paper compares Cascade against RFUZZ on multiplexer select coverage
formal verification mentions → 100% 2e
The paper discusses formal verification as a costly alternative to fuzzing
USENIX Security Symposium published by → 1e
The Cascade paper was published at the USENIX Security Symposium.
HyPFuzz mentions → 90% 1e
The paper mentions HypFuzz as a related tool that Cascade outperforms.
ETH Zurich authored by → 100% 1e
All authors are affiliated with ETH Zurich
F. Solt authored by → 1e
F. Solt is an author of the Cascade paper.
K. Ceesay-Seitz authored by → 1e
K. Ceesay-Seitz is an author of the Cascade paper.
Cascade mentions → 90% 1e
The title explicitly names 'Cascade', and a project URL is provided, indicating the paper discusses Cascade.
CPU mentions → 90% 1e
The title explicitly includes CPU, indicating the work concerns CPUs.
ETH Zurich published by → 100% 1e
All authors are affiliated with ETH Zurich.
CPU fuzzing mentions → 95% 1e
CPU fuzzing appears in the paper's title, indicating it is a central topic.
Program Reduction introduces → 100% 1e
The paper introduces a new automated program reduction method.
K. Razavi authored by → 1e
K. Razavi is an author of the Cascade paper.

CITATIONS

7 sources
7 citations — click to expand
[1] [C1] The paper is titled 'Cascade: CPU Fuzzing via Intricate Program Generation' and is authored by Flavien Solt, Katharina Ceesay-Seitz, and Kaveh Razavi. Cascade: CPU Fuzzing via Intricate Program Generation - BibBase
[2] [C2] USENIX lists the paper at the 33rd USENIX Security Symposium (USENIX Security 24), in August 2024, published by the USENIX Association, pages 5341--5358, Philadelphia, PA. Cascade: CPU Fuzzing via Intricate Program Generation - USENIX
[3] [C3] BibBase provides a paper PDF link and a project URL for Cascade. Cascade: CPU Fuzzing via Intricate Program Generation - BibBase
[4] [C4] The public artifact repository is explicitly for this paper, is intended to help reproduce the paper's results and get started with Cascade, and points to cascade-meta as the location of most fuzzing code. comsec-group/cascade-artifacts
[5] [C5] The artifact README recommends a Docker image, says all experiments except the Questasim experiment run in Docker, describes Questasim as optional and commercial, and notes that some experiments require 64 cores. comsec-group/cascade-artifacts
[6] [C6] For Figure 16, the artifact container uses 30 seconds per point instead of the paper's 1200 seconds; the README says this still supports the claim that longer programs tend to be more efficient at finding bugs, and rebuilding the image takes many hours. comsec-group/cascade-artifacts
[7] [C7] The README recommends Verilator v5.006 if a specific warning appears, and says plots other than the Questasim experiment are stored in /cascade-meta/figures. comsec-group/cascade-artifacts