Skip to content
STIMSMITH

FuSS Framework

Tool
First seen 6/20/2026
Last seen 6/20/2026
Evidence 11 chunks

NEIGHBORHOOD

No graph connections found for this entity yet. It may appear in future ingestion runs.

explore full graph →

RELATIONSHIPS

20 connections
Test Vector uses → 100% 2e
FuSS generates and uses test vectors to achieve coverage goals.
Coverage-Guided Fuzzing implements → 100% 2e
The FuSS framework implements coverage-guided fuzzing as a core component.
Selective Symbolic Execution implements → 100% 2e
The FuSS framework implements selective symbolic execution to overcome coverage plateaus.
hardware fuzzing implements → 100% 2e
The FuSS framework implements hardware fuzzing as its primary validation approach.
Source-Destination Pair Extraction uses → 100% 2e
FuSS extracts source-destination pairs from the CFG to guide symbolic execution.
Plateau Detection uses → 100% 2e
FuSS implements a plateau detection mechanism to decide when to invoke symbolic execution.
Fuzzing Corpus uses → 100% 2e
FuSS uses and updates a fuzzing corpus throughout its execution.
Assembly Instruction Sequence uses → 100% 2e
FuSS generates and uses assembly instruction sequences as test inputs for hardware designs.
Branch Coverage evaluates → 100% 2e
FuSS evaluates its effectiveness using branch coverage as a metric.
toggle coverage evaluates → 100% 2e
FuSS evaluates its effectiveness using toggle coverage as a metric.
The paper introduces the FuSS hardware fuzzing framework that combines coverage-guided fuzzing with selective symbolic execution.
Design Instrumentation uses → 100% 2e
FuSS uses design instrumentation as the first step in its pipeline.
Hardware-Program Context Mapping uses → 100% 2e
FuSS uses hardware-program context mapping to connect fuzzing trajectories to hardware states.
Verilator uses → 100% 1e
FuSS uses Verilator to convert hardware models into cycle-accurate software models.
Angr uses → 100% 1e
FuSS uses angr for CFG generation and address decoding.
Z3 SMT solver uses → 100% 1e
FuSS uses the Z3 SMT solver for constraint solving during symbolic execution.
DiFuzzRTL uses → 100% 1e
FuSS uses a modified version of DifuzzRTL as its fuzzer engine.
VEX Intermediate Representation uses → 100% 1e
FuSS uses the VEX intermediate representation via angr for symbolic execution.
cycle-accurate simulation uses → 100% 1e
FuSS uses cycle-accurate simulation via Verilator for hardware modeling.
Hardware Testbench uses → 100% 1e
FuSS implements a testbench that instantiates hardware description and controls clock and reset lines.