The increasing complexity of modern processors poses many challenges to existing hardware verification tools and methodologies for detecting security-critical bugs.
Reading the bibliography…
W. E. Howden, “Theoretical and Empirical Studies of Program Testing,” IEEE Transactions on Software Engineering
1978
Earlier work this paper cites.
W. Yang, M.-K. Chung, and C.-M. Kyung, “Current Status and Challenges of SoC Verification for Embedded Systems Market,” IEEE International [Systems-on-Chip] SOC Conference
2003
Earlier work this paper cites.
Morgan Kaufmann, 2005
B. Wile, J. Goss, and W. Roesner, Comprehensive Functional Verification: The Complete Industry Cycle · 2005
Earlier work this paper cites.
S. R. Sarangi, A. Tiwari, and J. Torrellas, “Phoenix: Detecting and recovering from permanent processor design bugs with programmable hardware,” 2006 39th Annual IEEE/ACM International Symposium on Microarchitecture (MICRO’06)
2006
Earlier work this paper cites.
S. Vasudevan, “An Introduction to IC Verification,” Effective Functional Verification: Principles and Processes
2006
Earlier work this paper cites.
S. Gurumurthy, S. Vasudevan, and J. A. Abraham, “Automatic Generation of Instruction Sequences Targeting Hard-to-detect Structural Faults in a Processor,” IEEE International Test Conference
2006
Earlier work this paper cites.
I. Wagner and V. Bertacco, “Engineering trust with semantic guardians,” 2007 Design, Automation & Test in Europe Conference & Exhibition
2007
Earlier work this paper cites.
A. Molina and O. Cadenas, “Functional Verification: Approaches and Challenges,” Latin American applied research
2007
Earlier work this paper cites.
N. Nethercote and J. Seward, “Valgrind: A Framework for Heavyweight Dynamic Binary Instrumentation,” SIGPLAN Not
2007
Earlier work this paper cites.
S. Gurumurthy, R. Vemu, J. A. Abraham, and D. G. Saab, “Automatic Generation of Instructions to Robustly Test Delay Defects in Processors,” IEEE European Test Symposium
2007
Earlier work this paper cites.
Y. Wang, D. Gu, J. Xu, M. Wen, and L. Deng, “Ricb: integer overflow vulnerability dynamic analysis via buffer overflow,” International Conference on Forensics in Telecommunications, Information, and Multimedia
2010
Earlier work this paper cites.
E. M. Clarke, W. Klieber, M. Nováček, and P. Zuliani, “Model Checking and the State Explosion Problem,” LASER Summer School on Software Engineering
2011
Earlier work this paper cites.
M. Tiwari, J. K. Oberg, X. Li, J. Valamehr, T. Levin, B. Hardekopf, R. Kastner, F. T. Chong, and T. Sherwood, “Crafting a Usable Microkernel, Processor, and I/O System with Strict and Provable Information Flow Security,” ACM International Symposium on Computer Architecture
2011
Earlier work this paper cites.
X. Li, M. Tiwari, J. K. Oberg, V. Kashyap, F. T. Chong, T. Sherwood, and B. Hardekopf, “Caisson: A Hardware Description Language for Secure Information Flow,” ACM SIGPLAN Conference on Programming Language Design and Implementation
2011
Earlier work this paper cites.
D. J. Sorin, M. D. Hill, and D. A. Wood, “A Primer on Memory Consistency and Cache Coherence,” Synthesis lectures on computer architecture
2011
Earlier work this paper cites.
Springer Science & Business Media, 2012
W. Badawy and G. A. Julien, System-on-chip for Real-time Applications · 2012
Earlier work this paper cites.
K. Serebryany, D. Bruening, A. Potapenko, and D. Vyukov, “AddressSanitizer: A Fast Address Sanity Checker,” USENIX Annual Technical Conference
2012
Earlier work this paper cites.
L. Dukes, X. Yuan, and F. Akowuah, “A Case Study on Web Application Security Testing with Tools and Manual Testing,” IEEE Southeastcon
2013
Earlier work this paper cites.
J. Bai, L. Wu, N. Yun, Y. Liu, and X. Zhang, “A 10Gbps In-line Network Security Processor With a 32-bit Embedded CPU,” IEEE Wireless and Optical Communication Conference
2013
Earlier work this paper cites.
P. Subramanyan, N. Tsiskaridze, W. Li, A. Gascón, W. Y. Tan, A. Tiwari, N. Shankar, S. A. Seshia, and S. Malik, “Reverse engineering digital circuits using structural and functional analyses,” IEEE Transactions on Emerging Topics in Computing
2013
Earlier work this paper cites.
X. Li, V. Kashyap, J. K. Oberg, M. Tiwari, V. R. Rajarathinam, R. Kastner, T. Sherwood, B. Hardekopf, and F. T. Chong, “Sapper: A Language for Hardware-level Security Policy Enforcement,” International Conference on Architectural Support for Programming Languages and Operating Systems
2014
Earlier work this paper cites.
J. Rajendran, V. Vedula, and R. Karri, “Detecting malicious modifications of data in third-party intellectual property cores,” 2015 52nd ACM/EDAC/IEEE Design Automation Conference (DAC)
2015
Earlier work this paper cites.
M. Hicks, C. Sturton, S. T. King, and J. M. Smith, “Specs: A Lightweight Runtime Mechanism for Protecting Software From Security-critical Processor Bugs,” International Conference on Architectural Support for Programming Languages and Operating Systems
2015
Earlier work this paper cites.
D. Zhang, Y. Wang, G. E. Suh, and A. C. Myers, “A Hardware Design Language for Timing-Sensitive Information-Flow Security,” International Conference on Architectural Support for Programming Languages and Operating Systems
2015
Earlier work this paper cites.
M. Seaborn and T. Dullien, “Exploiting the DRAM Rowhammer Bug to Gain Kernel Privileges,” Black Hat
2015
Earlier work this paper cites.
Sunny .L He and Natalie H. Roe and Evan C. L. Wood and Noel Nachtigal and Jovana Helms, “Model of the Product Development Lifecycle.” https://prod.sandia.gov/techlib-noauth/access-control.cgi/2015/159022.pdf , 2015
2015
Earlier work this paper cites.
S. Xuan, J. Han, Z. Yu, Y. Ren, and X. Zeng, “A configurable SoC design for information security,” IEEE International Conference on ASIC
2015
Earlier work this paper cites.
W. Dietz, P. Li, J. Regehr, and V. Adve, “Understanding integer overflow in C/C++,” ACM Transactions on Software Engineering and Methodology (TOSEM)
2015
Earlier work this paper cites.
R. Qiao and M. Seaborn, “A New Approach for Rowhammer Attacks,” IEEE International Symposium on Hardware Oriented Security and Trust
2016
Earlier work this paper cites.
V. Van Der Veen, Y. Fratantonio, M. Lindorfer, D. Gruss, C. Maurice, G. Vigna, H. Bos, K. Razavi, and C. Giuffrida, “Drammer: Deterministic Rowhammer Attacks on Mobile Platforms,” ACM SIGSAC Conference on Computer and Communications Security
2016
Earlier work this paper cites.
K. Asanovic, R. Avizienis, J. Bachrach, S. Beamer, D. Biancolin, C. Celio, H. Cook, D. Dabbelt, J. Hauser, A. Izraelevitz, et al
2016
Earlier work this paper cites.
A. Ardeshiricham, W. Hu, and R. Kastner, “Clepsydra: Modeling Timing Flows in Hardware Designs,” IEEE/ACM International Conference on Computer-Aided Design
2017
Earlier work this paper cites.
W. Chen, S. Ray, J. Bhadra, M. Abadir, and L.-C. Wang, “Challenges and Trends in Modern SoC Design Verification,” IEEE Design & Test
2017
Earlier work this paper cites.
R. Zhang, N. Stanley, C. Griggs, A. Chi, and C. Sturton, “Identifying Security Critical Properties for the Dynamic Verification of a Processor,” ACM SIGARCH Computer Architecture News
2017
Earlier work this paper cites.
O. Mutlu, “The RowHammer Problem and Other Issues We May Face as Memory Becomes Denser,” Design, Automation & Test in Europe Conference & Exhibition
2017
Earlier work this paper cites.
A. Tang, S. Sethumadhavan, and S. Stolfo, “CLKSCREW: exposing the perils of security-oblivious energy management,” USENIX Security Symposium
2017
Earlier work this paper cites.
K. Serebryany, “OSS-Fuzz - Google’s Continuous Fuzzing Service for Open Source Software,” USENIX Association
2017
Earlier work this paper cites.
Y. Li, B. Chen, M. Chandramohan, S.-W. Lin, Y. Liu, and A. Tiu, “Steelix: program-state based binary fuzzing,” Joint Meeting on Foundations of Software Engineering
2017
Cited alongside, same era.
S. Schumilo, C. Aschermann, R. Gawlik, S. Schinzel, and T. Holz, “kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels,” USENIX Security Symposium
2017
Cited alongside, same era.
M. Lipp, M. Schwarz, D. Gruss, T. Prescher, W. Haas, A. Fogh, J. Horn, S. Mangard, P. Kocher, D. Genkin, et al
2018
Cited alongside, same era.
J. Van Bulck, F. Piessens, and R. Strackx, “Foreshadow: Extracting the keys to the intel { \{ SGX } \} kingdom with transient out-of-order execution,” USENIX Security Symposium
2018
Cited alongside, same era.
K. Laeufer, J. Koenig, D. Kim, J. Bachrach, and K. Sen, “RFUZZ: Coverage-directed Fuzz Testing of RTL on FPGAs,” IEEE/ACM International Conference on Computer-Aided Design
2018
Cited alongside, same era.
R. Zhang, C. Deutschbein, P. Huang, and C. Sturton, “End-to-end automated exploit generation for validating the security of processor designs,” IEEE/ACM International Symposium on Microarchitecture
2018
Cited alongside, same era.
Artech House, 2018
A. Takanen, J. D. Demott, C. Miller, and A. Kettunen, Fuzzing for Software Security Testing and Quality Assurance · 2018
Cited alongside, same era.
C.-C. Hsu, C.-Y. Wu, H.-C. Hsiao, and S.-K. Huang, “Instrim: Lightweight Instrumentation for Coverage-guided Fuzzing,” Symposium on Network and Distributed System Security (NDSS), Workshop on Binary Analysis Research
2018
Cited alongside, same era.
S. Gan, C. Zhang, X. Qin, X. Tu, K. Li, Z. Pei, and Z. Chen, “Collafl: Path sensitive fuzzing,” IEEE Symposium on Security and Privacy
2018
Cited alongside, same era.
J. Li, B. Zhao, and C. Zhang, “Fuzzing: a survey,” Cybersecurity
2018
Cited alongside, same era.
C. Deutschbein and C. Sturton, “Mining security critical linear temporal logic specifications for processors,” IEEE International Workshop on Microprocessor and SOC Test and Verification
2018
Cited alongside, same era.
C. Domas, “Hardware backdoors in x86 CPUs,” Black Hat
2018
Cited alongside, same era.
J. Hur, S. Song, D. Kwon, E. Baek, J. Kim, and B. Lee, “DifuzzRTL: Differential Fuzz Testing to Find CPU Bugs,” IEEE Symposium on Security and Privacy
2021
Later among the works it cites.
Last accessed on 04/08/2021
NIST, “CVE-2004-2439 in HP LaserJet printers.” https://nvd.nist.gov/vuln/detail/CVE-2004-2439 , 2004 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
NIST, “CVE-2007-1221 in Microsoft Xbox 360.” https://nvd.nist.gov/vuln/detail/CVE-2007-1221 , 2007 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
NIST, “CVE-2009-2206 in the CoreAudio component in Apple iPhone OS.” https://nvd.nist.gov/vuln/detail/CVE-2009-2206 , 2009 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
NIST, “CVE-2013-3582 in Dell BIOS.” https://nvd.nist.gov/vuln/detail/CVE-2013-3582 , 2013 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
NIST, “CVE-2016-2453 in MediaTek WiFi driver.” https://nvd.nist.gov/vuln/detail/CVE-2016-2453 , 2016 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
NIST, “CVE-2017-5927 in cache of modern ARM processors.” https://nvd.nist.gov/vuln/detail/CVE-2017-5927 , 2017 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
Cadence, “JasperGold Formal Verification Platform.” https://bit.ly/3yutjQN , 2014 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
lcamtuf, “American Fuzzy Lop (AFL) Fuzzer..” http://lcamtuf.coredump.cx/afl/technical_details.txt · 2021
Later among the works it cites.
Last accessed on 04/08/2021
S. Groß, “FuzzIL: Coverage Guided Fuzzing for JavaScript Engines.” https://saelo.github.io/papers/thesis.pdf · 2021
Later among the works it cites.
Last accessed on 04/08/2021
Google, “Syzkaller.” https://github.com/google/syzkaller , 2021 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
Google, “ClusterFuzz.” https://google.github.io/clusterfuzz/ , 2021 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
W. Snyder, “Verilator.” https://www.veripool.org/wiki/verilator , 2021 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
Synopsys, “Synopsys VCS.” https://www.synopsys.com/verification/simulation/vcs.html , 2021 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
IBM, “CPLEX.” https://pypi.org/project/cplex/ , 2021 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
RISC-V, “RISC-V webpage.” https://riscv.org/ , 2021 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
Princeton, “OpenPiton.” https://parallel.princeton.edu/openpiton/index.html , 2018 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
OpenRISC, “OpenRISC homepage.” https://openrisc.io/ , 2020 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
RISC-V, “RISC-V tests.” https://github.com/riscv/riscv-tests , 2014 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
RISC-V, “RISC-V github repositories.” https://github.com/riscv , 2021 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
OpenRISC, “openrisc github repositories.” https://github.com/openrisc/ , 2021 · 2021
Later among the works it cites.
McGraw-Hill Higher Education New York, NY, USA, 2008
W. C. Navidi, Statistics for engineers and scientists · 2021
Later among the works it cites.
Last accessed on 04/08/2021
Google, “Opentitan SoC.” https://opentitan.org/ , 2021 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
OpenHW Group, “Ariane Source Code.” https://github.com/lowRISC/ariane , 2020 · 2021
Later among the works it cites.
Last accessed on 10/09/2021
Intel, “Intel Archsim.” https://course.ece.cmu.edu/˜ece742/2011spring/lib/exe/fetch.php?media=marr_hyperthread02.pdf , 2021 · 2021
Later among the works it cites.
Last accessed on 10/09/2021
AMD, “AMD SimNow.” https://developer.amd.com/simnow-simulator , 2021 · 2021
Later among the works it cites.
Last accessed on 10/09/2021
ARM, “ARM Cortex Neoverse.” https://www.arm.com/products/silicon-ip-cpu/neoverse/neoverse-n1 , 2021 · 2021
Later among the works it cites.
Last accessed on 10/09/2021
ARM, “ARM Fast Models.” https://developer.arm.com/tools-and-software/simulation-models/fast-models , 2021 · 2021
Later among the works it cites.
Last accessed on 10/08/2021
Imagination, “Imagination Technologies.” https://www.imaginationtech.com/products , 2021 · 2021
Later among the works it cites.
Last accessed on 10/09/2021
Cadence, “Cadence Design IP Portfolio.” https://ip.cadence.com/ipportfolio/ip-portfolio-overview , 2021 · 2021
Later among the works it cites.
Last accessed on 10/08/2021
Synopsys, “Synopsys DesignWare IP.” https://www.synopsys.com/designware-ip.html , 2021 · 2021
Later among the works it cites.
Last accessed on 10/08/2021
Techinsights, “TechInsights.” https://www.techinsights.com/ , 2021 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
M. Zalewski, “Technical Whitepaper for AFL Fuzzer.” http://lcamtuf.coredump.cx/afl/technical_details.txt , 2015 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
Google, “Google Chrome.” https://www.google.com/chrome/ , 2021 · 2021
Later among the works it cites.
Last accessed on 04/08/2021
Schulist, Jay and Borkmann, Daniel and Starovoitov, Alexei, “Berkeley Packet Filter.” https://www.kernel.org/doc/Documentation/networking/filter.txt , 2011 · 2021
Later among the works it cites.
Peter Maydell, “QEMU Translator Internals.” https://gitlab.com/qemu-project/qemu/-/blob/master/docs/devel/tcg.rst , 2020 · 2021
Later among the works it cites.
alphaXiv searches the wider corpus for related work and actual follow-ups.
alphaXiv is searching for related work…