Skip to content
STIMSMITH

ReFuzz

Tool
First seen 7/4/2026
Last seen 9/10/2026
Evidence 19 chunks

NEIGHBORHOOD

No graph connections found for this entity yet. It may appear in future ingestion runs.

explore full graph →

RELATIONSHIPS

27 connections
BOOMV4 evaluates → 100% 3e
ReFuzz is evaluated on BOOMV4 as the primary processor-under-test.
Processor Fuzzing implements → 100% 3e
ReFuzz is a processor fuzzing framework that implements hardware fuzzing techniques.
Prior-Processor Tests uses → 100% 3e
ReFuzz leverages tests from prior processors as seeds to guide fuzzing of a new processor-under-test.
Contextual Bandit implements → 100% 3e
ReFuzz implements contextual bandit algorithms to adaptively select and reuse prior-processor tests.
The paper introduces ReFuzz as its core contribution, a novel adaptive fuzzing framework.
Coverage Matrix uses → 95% 2e
ReFuzz constructs and uses a coverage matrix for its test minimization step.
Cascade ← compares with 95% 2e
ReFuzz is compared against Cascade in coverage and vulnerability detection evaluations.
differential testing implements → 95% 2e
ReFuzz employs differential testing by comparing PUT outputs against a golden-reference model.
Mutation-Based Fuzzing implements → 95% 2e
ReFuzz mutates prior-processor tests to generate new tests for the processor-under-test.
Test Minimization implements → 98% 2e
ReFuzz uses a test minimizer to remove redundant PP-tests before training the CB model.
Incremental Coverage uses → 100% 2e
ReFuzz uses incremental coverage as the reward signal for the contextual bandit algorithm.
Exploration-Exploitation Tradeoff uses → 100% 2e
ReFuzz uses the exploration-exploitation tradeoff of contextual bandits to balance test reuse and exploration.
Synopsys VCS uses → 100% 2e
ReFuzz uses Synopsys VCS as the industry-standard simulator to generate coverage databases.
TheHuzz uses → 100% 2e
ReFuzz is integrated with TheHuzz as one of the baseline fuzzers for generating PP-tests and evaluation.
Cascade uses → 100% 2e
ReFuzz is integrated with Cascade as one of the baseline fuzzers for generating PP-tests and evaluation.
RSD Processor evaluates → 100% 2e
ReFuzz is evaluated on the RSD processor and detected vulnerabilities in it.
Vulnerability Test uses → 95% 2e
ReFuzz categorizes and uses vulnerability tests that trigger known vulnerabilities in prior processors.
TheHuzz compares with → 95% 2e
ReFuzz is compared against TheHuzz in coverage and vulnerability detection evaluations.
contextual bandits uses → 98% 1e
ReFuzz uses contextual bandits to select and mutate effective tests.
Integer Programming uses → 100% 1e
ReFuzz uses integer programming to solve the test minimization optimization problem.
Branch Coverage uses → 100% 1e
ReFuzz uses branch coverage as its primary coverage metric.
epsilon-greedy exploration uses → 100% 1e
ReFuzz uses the epsilon-greedy algorithm within its CB model to encourage exploration.
MABWiser uses → 100% 1e
ReFuzz implements its CB algorithms using the MABWiser Python library.
test mutation uses → 95% 1e
ReFuzz selects and mutates tests from historic processor designs.
Chipyard uses → 100% 1e
ReFuzz uses Chipyard as the simulation environment for multiple RISC-V processors.
spike uses → 100% 1e
ReFuzz uses Spike as the golden-reference model for differential testing.
MINTS uses → 80% 1e
ReFuzz is inspired by MINTS for its test minimization approach.