Intelligent Graybox Fuzzing via ATPG-Guided Seed Generation and Submodule Analysis

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Saravanan, Raghul, Paria, Sudipta, Dasgupta, Aritra, Bhunia, Swarup, D, Sai Manoj P
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866908787845103616
author Saravanan, Raghul
Paria, Sudipta
Dasgupta, Aritra
Bhunia, Swarup
D, Sai Manoj P
author_facet Saravanan, Raghul
Paria, Sudipta
Dasgupta, Aritra
Bhunia, Swarup
D, Sai Manoj P
contents Hardware Fuzzing emerged as one of the crucial techniques for finding security flaws in modern hardware designs by testing a wide range of input scenarios. One of the main challenges is creating high-quality input seeds that maximize coverage and speed up verification. Coverage-Guided Fuzzing (CGF) methods help explore designs more effectively, but they struggle to focus on specific parts of the hardware. Existing Directed Gray-box Fuzzing (DGF) techniques like DirectFuzz try to solve this by generating targeted tests, but it has major drawbacks, such as supporting only limited hardware description languages, not scaling well to large circuits, and having issues with abstraction mismatches. To address these problems, we introduce a novel framework, PROFUZZ, that follows the DGF approach and combines fuzzing with Automatic Test Pattern Generation (ATPG) for more efficient fuzzing. By leveraging ATPG's structural analysis capabilities, PROFUZZ can generate precise input seeds that target specific design regions more effectively while maintaining high fuzzing throughput. Our experiments show that PROFUZZ scales 30x better than DirectFuzz when handling multiple target sites, improves coverage by 11.66%, and runs 2.76x faster, highlighting its scalability and effectiveness for directed fuzzing in complex hardware systems.
format Preprint
id arxiv_https___arxiv_org_abs_2509_20808
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Intelligent Graybox Fuzzing via ATPG-Guided Seed Generation and Submodule Analysis
Saravanan, Raghul
Paria, Sudipta
Dasgupta, Aritra
Bhunia, Swarup
D, Sai Manoj P
Cryptography and Security
Hardware Fuzzing emerged as one of the crucial techniques for finding security flaws in modern hardware designs by testing a wide range of input scenarios. One of the main challenges is creating high-quality input seeds that maximize coverage and speed up verification. Coverage-Guided Fuzzing (CGF) methods help explore designs more effectively, but they struggle to focus on specific parts of the hardware. Existing Directed Gray-box Fuzzing (DGF) techniques like DirectFuzz try to solve this by generating targeted tests, but it has major drawbacks, such as supporting only limited hardware description languages, not scaling well to large circuits, and having issues with abstraction mismatches. To address these problems, we introduce a novel framework, PROFUZZ, that follows the DGF approach and combines fuzzing with Automatic Test Pattern Generation (ATPG) for more efficient fuzzing. By leveraging ATPG's structural analysis capabilities, PROFUZZ can generate precise input seeds that target specific design regions more effectively while maintaining high fuzzing throughput. Our experiments show that PROFUZZ scales 30x better than DirectFuzz when handling multiple target sites, improves coverage by 11.66%, and runs 2.76x faster, highlighting its scalability and effectiveness for directed fuzzing in complex hardware systems.
title Intelligent Graybox Fuzzing via ATPG-Guided Seed Generation and Submodule Analysis
topic Cryptography and Security
url https://arxiv.org/abs/2509.20808