00

Cascade

Tool ☆ WATCH ⎘ SHARE

First seen 6/10/2026

Last seen 6/14/2026

Evidence 32 chunks

01

NEIGHBORHOOD

38 nodes · 78 edges

graph · Cascade · depth=1

02

RELATIONSHIPS

44 connections

openC906 RTL evaluates → 100% 3e evidence

Cascade is used to evaluate the openC906 RTL.

openC910 RTL evaluates → 100% 3e evidence

Cascade is used to evaluate the openC910 RTL.

Asymmetric ISA Pre-Simulation implements → 100% 3e evidence

Cascade implements the asymmetric ISA pre-simulation technique for entangling control and data flows.

RISCover compares with → 100% 3e evidence

RISCover is compared to Cascade for bug-finding efficacy on open-source RISC-V cores.

RTL Fuzzing implements → 100% 2e evidence

Cascade is described as a state-of-the-art RISC-V RTL CPU fuzzer.

Cascade: CPU fuzzing via intricate program generation ← introduces 100% 2e evidence

The paper presents and introduces Cascade as a new CPU fuzzer.

DiFuzzRTL compares with → 100% 2e evidence

Cascade is compared against DifuzzRTL in coverage and performance evaluations.

Lyra compares with → 100% 2e evidence

Lyra is empirically compared against Cascade in coverage and throughput.

hardware fuzzing implements → 100% 2e evidence

Cascade employs program generation for CPU fuzzing.

Lyra: A Hardware-Accelerated RISC-V Verification Framework with Generative Model-Based Processor Fuzzing ← compares with 100% 2e evidence

The paper compares Lyra against Cascade in empirical evaluations.

Control Register Coverage evaluates → 100% 2e evidence

Cascade evaluates control register coverage against DifuzzRTL.

Multiplexer Select Coverage evaluates → 100% 2e evidence

Cascade evaluates multiplexer select coverage against RFUZZ.

Simulator-Based Coverage evaluates → 100% 2e evidence

Cascade evaluates simulator-based coverage in comparison with TheHuzz.

Program Completion Rate evaluates → 100% 2e evidence

Cascade measures and reports program completion rates as a key metric.

Fuzzing Instruction Prevalence evaluates → 100% 2e evidence

Cascade measures and reports fuzzing instruction prevalence as a key metric.

Dependency Chain Length evaluates → 100% 2e evidence

Cascade analyzes dependency chain lengths in generated programs as a quality metric.

Yosys evaluates → 90% 2e evidence

Cascade discovered a critical bug in the Yosys synthesizer.

Control Flow Entanglement with Data Flow implements → 100% 2e evidence

Cascade generates programs with highly randomized and interdependent data and control flows.

Program Reduction implements → 100% 2e evidence

Cascade implements an automated program reduction technique to find minimal bug-triggering programs.

Intermediate Program Construction implements → 100% 2e evidence

Cascade uses intermediate program construction as a core step in generating ultimate programs.

RISC-V ISA uses → 100% 2e evidence

Cascade generates valid RISC-V programs targeting the RISC-V ISA.

Instruction Set Simulator uses → 100% 2e evidence

Cascade uses an ISS to execute intermediate programs and collect data-flow dependent values for constructing ultimate programs.

Basic Block uses → 100% 2e evidence

Cascade constructs programs as sequences of basic blocks.

cf-ambiguous Instructions uses → 100% 2e evidence

Cascade handles cf-ambiguous instructions specially during program generation to control program flow.

Bug-Triggered Program Non-Termination uses → 100% 2e evidence

Cascade relies on program non-termination as its bug detection mechanism.

Privilege Transitions uses → 100% 2e evidence

Cascade generates programs supporting data flow-dependent privilege transitions.

FPU Operations uses → 100% 2e evidence

Cascade supports complex FPU operations in generated programs.

Control and Status Registers uses → 100% 2e evidence

Cascade generates programs that operate under randomized CSRs.

Memory Management in Program Generation uses → 100% 2e evidence

Cascade employs progressive and strong memory allocation strategies during program generation.

Offset Register Construction uses → 100% 2e evidence

Cascade uses offset register construction to entangle data and control flows.

RTL Simulation uses → 100% 2e evidence

Cascade executes generated programs on RTL simulations of RISC-V CPUs.

Spike (ISS) uses → 90% 2e evidence

Cascade uses Spike as the ISS for RISC-V program pre-simulation.

Rocket Core evaluates → 100% 2e evidence

Cascade is evaluated on Rocket Core as one of the 6 RISC-V CPU targets.

BOOM evaluates → 100% 2e evidence

Cascade is evaluated on BOOM as one of the 6 RISC-V CPU targets.

GoldenFuzz compares with → 100% 2e evidence

GoldenFuzz is benchmarked against Cascade for hardware coverage.

TheHuzz compares with → 100% 2e evidence

Cascade is compared against TheHuzz in coverage and performance evaluations.

RFUZZ compares with → 100% 2e evidence

Cascade is compared against RFUZZ in multiplexer select coverage evaluations.

spike uses → 90% 1e evidence

Cascade uses Spike as an ISA simulator during fuzzing.

VexRiscv evaluates → 100% 1e evidence

Cascade is evaluated on VexRiscv as one of the 6 RISC-V CPU targets.

PicoRV32 evaluates → 100% 1e evidence

Cascade is evaluated on PicoRV32 as one of the 6 RISC-V CPU targets.

Kronos evaluates → 100% 1e evidence

Cascade is evaluated on Kronos as one of the 6 RISC-V CPU targets.

CPU fuzzing implements → 100% 1e evidence

Cascade is a CPU fuzzer that implements CPU fuzzing techniques.

CVA6 evaluates → 100% 1e evidence

Cascade is evaluated on CVA6 as one of the 6 RISC-V CPU targets.

HyPFuzz compares with → 80% 1e evidence

Cascade discovers bugs undetected by HypFuzz.