{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,11]],"date-time":"2026-07-11T16:30:31Z","timestamp":1783787431927,"version":"3.55.0"},"reference-count":52,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62172407"],"award-info":[{"award-number":["62172407"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004739","name":"Youth Innovation Promotion Association of the Chinese Academy of Sciences","doi-asserted-by":"crossref","award":["2022153"],"award-info":[{"award-number":["2022153"]}],"id":[{"id":"10.13039\/501100004739","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/tifs.2026.3674691","type":"journal-article","created":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T20:23:06Z","timestamp":1773778986000},"page":"3463-3478","source":"Crossref","is-referenced-by-count":1,"title":["ModFuzz: Adaptive Module-Level Fuzzing of Processors"],"prefix":"10.1109","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-2746-7331","authenticated-orcid":false,"given":"He","family":"Wang","sequence":"first","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8666-7516","authenticated-orcid":false,"given":"Ruomin","family":"Fang","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4994-6046","authenticated-orcid":false,"given":"Liwei","family":"Chen","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-7512-1933","authenticated-orcid":false,"given":"Yulin","family":"Li","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Miaomiao","family":"Yuan","sequence":"additional","affiliation":[{"name":"Chinese Academy of Sciences, Institute of Computing Technology, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-7152-9210","authenticated-orcid":false,"given":"Gang","family":"Shi","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dan","family":"Meng","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ISVLSI.2015.107"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2011.49"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2744769.2744823"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35746-6_1"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2006.41"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/DATE.2007.364684"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/1993316.1993512"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2017.8203772"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2541940.2541947"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2694344.2694366"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2694344.2694372"},{"key":"ref12","first-page":"213","article-title":"HardFails: Insights into software-exploitable hardware bugs","volume-title":"Proc. USENIX Secur. Symp.","author":"Dessouky"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SOC.2003.1241495"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/MDAT.2017.2735383"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-30596-3"},{"key":"ref16","article-title":"Hardware verification in an open source context","volume-title":"Proc. Workshop Open Source Design Autom.","author":"Marshall"},{"key":"ref17","first-page":"1343","article-title":"FISHFUZZ: Catch deeper bugs by throwing larger nets","volume-title":"Proc. 32nd USENIX Secur. Symp. (USENIX Secur.)","author":"Zheng"},{"key":"ref18","first-page":"2271","article-title":"FuzzGen: Automatic fuzzer generation","volume-title":"Proc. 29th USENIX Secur. Symp.","author":"Ispoglou"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23404"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2025.241133"},{"key":"ref21","first-page":"3237","article-title":"Fuzzing hardware like software","volume-title":"Proc. USENIX Secur. Symp.","author":"Trippel"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18074.2021.9586289"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00103"},{"key":"ref24","first-page":"3219","article-title":"TheHuzz: Instruction fuzzing of processors using golden-reference models for finding software-exploitable vulnerabilities","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Kande","year":"2022"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3466752.3480092"},{"key":"ref26","first-page":"1307","article-title":"MorFuzz: Fuzzing processor via runtime instruction morphing enhanced synchronizable co-simulation","volume-title":"Proc. 32nd USENIX Secur. Symp. (USENIX Secur.)","author":"Xu"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/DAC56929.2023.10247942"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2024.3360318"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD57390.2023.10323819"},{"key":"ref30","article-title":"WhisperFuzz: White-box fuzzing for detecting and locating timing vulnerabilities in processors","volume-title":"arXiv:2402.03704","author":"Borkar"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/HOST55118.2023.10133714"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/4235.996017"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240842"},{"key":"ref34","first-page":"1","article-title":"CASCADE: CPU fuzzing via intricate program generation","volume-title":"Proc. 33rd USENIX Secur. Symp.","author":"Solt"},{"key":"ref35","volume-title":"Chronologic VCS Simulator","year":"2021"},{"key":"ref36","volume-title":"Icarus Verilog","author":"Williams","year":"2021"},{"key":"ref37","volume-title":"Verilator","author":"Snyder","year":"2021"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.23919\/DATE58400.2024.10546726"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD57390.2023.10323913"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/tse.2017.2785841"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00040"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23312"},{"key":"ref43","first-page":"167","article-title":"KAFL: Hardware-assisted feedback fuzzing for OS kernels","volume-title":"Proc. 26th USENIX Secur. Symp. (USENIX Secur.)","author":"Schumilo"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23176"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670396"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363225"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00046"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978428"},{"key":"ref49","article-title":"Yosys\u2014A free verilog synthesis suite","volume-title":"Proc. 21st Austrian Workshop Microelectron. (Austrochip)","volume":"97","author":"Wolf"},{"key":"ref50","volume-title":"Starship SoC Generator"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.21236\/ada605735"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.21236\/ada605735"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/10206\/11313711\/11436076.pdf?arnumber=11436076","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,7]],"date-time":"2026-04-07T19:58:30Z","timestamp":1775591910000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11436076\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":52,"URL":"https:\/\/doi.org\/10.1109\/tifs.2026.3674691","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}