{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T00:02:54Z","timestamp":1780444974682,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":65,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,11,13]],"date-time":"2022-11-13T00:00:00Z","timestamp":1668297600000},"content-version":"vor","delay-in-days":366,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"NSF","award":["CNS-1749711"],"award-info":[{"award-number":["CNS-1749711"]}]},{"name":"ONR","award":["N00014-18-1-2662"],"award-info":[{"award-number":["N00014-18-1-2662"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,11,12]]},"DOI":"10.1145\/3460120.3484573","type":"proceedings-article","created":{"date-parts":[[2021,11,13]],"date-time":"2021-11-13T12:05:27Z","timestamp":1636805127000},"page":"2214-2228","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["Hardware Support to Improve Fuzzing Performance and Precision"],"prefix":"10.1145","author":[{"given":"Ren","family":"Ding","sequence":"first","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yonghae","family":"Kim","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fan","family":"Sang","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wen","family":"Xu","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gururaj","family":"Saileshwar","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Taesoo","family":"Kim","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,11,13]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Apple. 2020. M1: Apple Neural Engine. https:\/\/www.apple.com\/newsroom\/2020\/11\/apple-unleashes-m1\/."},{"key":"e_1_3_2_1_2_1","unstructured":"ARM. 2009. CoreSight Components Technical Reference Manual. https:\/\/developer.arm.com\/documentation\/ddi0314\/h\/."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23371"},{"key":"e_1_3_2_1_4_1","volume-title":"Proceedings of the 2005 USENIX Annual Technical Conference (ATC)","author":"Bellard Fabrice","year":"2005","unstructured":"Fabrice Bellard. 2005. QEMU, a fast and portable dynamic translator. In Proceedings of the 2005 USENIX Annual Technical Conference (ATC). Anaheim, CA."},{"key":"e_1_3_2_1_5_1","unstructured":"UC Berkeley. 2016. Rocket Chip Generator. https:\/\/github.com\/chipsalliance\/rocket-chip."},{"key":"e_1_3_2_1_6_1","unstructured":"UC Berkeley. 2017. The Berkeley Out-of-Order RISC-V Processor. https:\/\/github.com\/riscv-boom\/riscv-boom."},{"key":"e_1_3_2_1_7_1","unstructured":"UC Berkeley. 2019. The Branch Predictor (BPD) in RISC-V BOOM. https:\/\/docs.boom-core.org\/en\/latest\/sections\/branch-prediction\/backing-predictor.html."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3289602.3293894"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3368089.3409748"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978428"},{"key":"e_1_3_2_1_11_1","unstructured":"Derek Bruening and Saman Amarasinghe. 2004. Efficient transparent and comprehensive runtime code manipulation. Ph.D. Dissertation. Massachusetts Institute of Technology."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00046"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329828"},{"key":"e_1_3_2_1_14_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (Security)","author":"Delshadtehrani Leila","year":"2020","unstructured":"Leila Delshadtehrani, Sadullah Canakci, Boyou Zhou, Schuyler Eldridge, Ajay Joshi, and Manuel Egele. 2020. PHMon: A Programmable Hardware Monitor and Its Security Use Cases. In Proceedings of the 29th USENIX Security Symposium (Security). Boston, MA."},{"key":"e_1_3_2_1_15_1","volume-title":"Proceedings of the 41st IEEE Symposium on Security and Privacy (Oakland).","author":"Dinesh Sushant","year":"2018","unstructured":"Sushant Dinesh, Nathan Burow, Dongyan Xu, and Mathias Payer. 2018. Retrowrite: Statically instrumenting cots binaries for fuzzing and sanitization. In Proceedings of the 41st IEEE Symposium on Security and Privacy (Oakland)."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3395363.3397372"},{"key":"e_1_3_2_1_17_1","volume-title":"Proceedings of the 14th USENIX Workshop on Offensive Technologies (WOOT).","author":"Fioraldi Andrea","year":"2020","unstructured":"Andrea Fioraldi, Dominik Maier, Heiko Ei\u00dffeldt, and Marc Heuse. 2020 b. AFL+: Combining incremental steps of fuzzing research. In Proceedings of the 14th USENIX Workshop on Offensive Technologies (WOOT)."},{"key":"e_1_3_2_1_18_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (Security)","author":"Gan Shuitao","year":"2020","unstructured":"Shuitao Gan, Chao Zhang, Peng Chen, Bodong Zhao, Xiaojun Qin, Dong Wu, and Zuoning Chen. 2020. GREYONE: Data Flow Sensitive Fuzzing. In Proceedings of the 29th USENIX Security Symposium (Security). Boston, MA."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00040"},{"key":"e_1_3_2_1_20_1","unstructured":"GNU Compiler Collection (GCC). 2012. Gcov is a test coverage program. https:\/\/gcc.gnu.org\/onlinedocs\/gcc\/Gcov-Intro.html."},{"key":"e_1_3_2_1_21_1","unstructured":"GNU Project. 2020. GNU Binutils. https:\/\/www.gnu.org\/software\/binutils."},{"key":"e_1_3_2_1_22_1","unstructured":"Google. 2018. syzkaller -- kernel fuzzer. https:\/\/github.com\/google\/syzkaller."},{"key":"e_1_3_2_1_23_1","unstructured":"Google. 2020 a. Cloud TPU: Empowering businesses with Google Cloud AI. https:\/\/cloud.google.com\/tpu."},{"key":"e_1_3_2_1_24_1","unstructured":"Google. 2020 b. ClusterFuzz. https:\/\/google.github.io\/clusterfuzz."},{"key":"e_1_3_2_1_25_1","unstructured":"Google. 2020. FuzzBench: Fuzzer benchmarking as a service. https:\/\/github.com\/google\/fuzzbench."},{"key":"e_1_3_2_1_26_1","unstructured":"Google. 2020. Honggfuzz. https:\/\/github.com\/google\/honggfuzz."},{"key":"e_1_3_2_1_27_1","unstructured":"Google. 2020. OSS-Fuzz - Continuous Fuzzing for Open Source Software. https:\/\/github.com\/google\/oss-fuzz."},{"key":"e_1_3_2_1_28_1","unstructured":"Google Project Zero. 2020. WinAFL. https:\/\/github.com\/googleprojectzero\/winafl."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2966986.2980098"},{"key":"e_1_3_2_1_30_1","unstructured":"IBM. 2016. IBM z13 Technical Guide. https:\/\/www.redbooks.ibm.com\/redbooks\/pdfs\/sg248251.pdf."},{"key":"e_1_3_2_1_31_1","volume-title":"Intel\u00ae 64 and ia-32 architectures software developer's manual","year":"2011","unstructured":"Intel. 2011. Intel\u00ae 64 and ia-32 architectures software developer's manual. Volume 3B: System programming Guide, Part 2 (2011)."},{"key":"e_1_3_2_1_32_1","unstructured":"Intel. 2011. Intel BTS: Real time instruction trace. https:\/\/www.intel.com\/content\/dam\/www\/public\/us\/en\/documents\/reference-guides\/real-time-instruction-trace-atom-reference.pdf."},{"key":"e_1_3_2_1_33_1","unstructured":"Intel. 2013. Intel processor trace decoder library. https:\/\/github.com\/intel\/libipt."},{"key":"e_1_3_2_1_34_1","volume-title":"2020 a. 10th Generation Intel Core Processor Families. https:\/\/www.intel.com\/content\/www\/us\/en\/products\/docs\/processors\/core\/10th-gen-core-families-datasheet-vol-1.html","unstructured":"Intel. 2020 a. 10th Generation Intel Core Processor Families. https:\/\/www.intel.com\/content\/www\/us\/en\/products\/docs\/processors\/core\/10th-gen-core-families-datasheet-vol-1.html."},{"key":"e_1_3_2_1_35_1","volume-title":"2020 b. 11th Generation Intel Core Processor (UP3 and UP4). https:\/\/cdrdv2.intel.com\/v1\/dl\/getContent\/631121","unstructured":"Intel. 2020 b. 11th Generation Intel Core Processor (UP3 and UP4). https:\/\/cdrdv2.intel.com\/v1\/dl\/getContent\/631121."},{"key":"e_1_3_2_1_36_1","unstructured":"James R. 2013. Processor Tracing. https:\/\/software.intel.com\/content\/www\/us\/en\/develop\/blogs\/processor-tracing.html."},{"key":"e_1_3_2_1_37_1","unstructured":"Simon Kagstrom. 2015. Kcov is a FreeBSD\/Linux\/OSX code coverage tester. https:\/\/github.com\/SimonKagstrom\/kcov."},{"key":"e_1_3_2_1_38_1","unstructured":"Michael Kan. 2021. Intel to Build Chips for Other Companies With New Foundry Business. https:\/\/in.pcmag.com\/processors\/141636\/intel-to-build-chips-for-other-companies-with-new-foundry-business."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA.2018.00014"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243804"},{"key":"e_1_3_2_1_41_1","unstructured":"lafintel. 2016. LAF LLVM Passes. https:\/\/gitlab.com\/laf-intel\/laf-llvm-pass."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238176"},{"key":"e_1_3_2_1_43_1","unstructured":"LLVM Project. 2020. libFuzzer - a library for coverage-guided fuzz testing. https:\/\/llvm.org\/docs\/LibFuzzer.html."},{"key":"e_1_3_2_1_44_1","volume-title":"Vijay Janapa Reddi, and Kim Hazelwood","author":"Luk Chi-Keung","year":"2005","unstructured":"Chi-Keung Luk, Robert Cohn, Robert Muth, Harish Patil, Artur Klauser, Geoff Lowney, Steven Wallace, Vijay Janapa Reddi, and Kim Hazelwood. 2005. Pin: building customized program analysis tools with dynamic instrumentation. Acm sigplan notices, Vol. 40, 6 (2005), 190--200."},{"key":"e_1_3_2_1_45_1","volume-title":"Proceedings of the 28th USENIX Security Symposium (Security)","author":"Lyu Chenyang","year":"2019","unstructured":"Chenyang Lyu, Shouling Ji, Chao Zhang, Yuwei Li, Wei-Han Lee, Yu Song, and Raheem Beyah. 2019. MOPT: Optimized mutation scheduling for fuzzers. In Proceedings of the 28th USENIX Security Symposium (Security). Santa Clara, CA."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380421"},{"key":"e_1_3_2_1_47_1","unstructured":"Microsoft Security Response Center (MSRC). 2020. OneFuzz. https:\/\/github.com\/microsoft\/onefuzz."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00069"},{"key":"e_1_3_2_1_49_1","volume-title":"Unicorn: Next Generation CPU Emulator Framework. In Black Hat USA Briefings (Black Hat USA).","author":"Nguyen Anh-Quynh","year":"2014","unstructured":"Anh-Quynh Nguyen and Hoang-Vu Dang. 2014. Unicorn: Next Generation CPU Emulator Framework. In Black Hat USA Briefings (Black Hat USA). Las Vegas, NV."},{"key":"e_1_3_2_1_50_1","volume-title":"NVIDIA DRIVE AGX ORIN: Advanced, Software-Defined Platform for Autonomous Machines. https:\/\/www.nvidia.com\/en-us\/self-driving-cars\/drive-platform\/hardware\/.","year":"2020","unstructured":"Nvidia. 2020. NVIDIA DRIVE AGX ORIN: Advanced, Software-Defined Platform for Autonomous Machines. https:\/\/www.nvidia.com\/en-us\/self-driving-cars\/drive-platform\/hardware\/."},{"key":"e_1_3_2_1_51_1","volume-title":"Smart Greybox Fuzzing","author":"Pham Van-Thuan","unstructured":"Van-Thuan Pham, Marcel Bohme, Andrew Santosa, Alexandru Caciulescu, and Abhik Roychoudhury. 2019. Smart Greybox Fuzzing. In IEEE Transactions on Software Engineering."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23404"},{"key":"e_1_3_2_1_53_1","volume-title":"Proceedings of the 26th USENIX Security Symposium (Security)","author":"Schumilo Sergej","year":"2017","unstructured":"Sergej Schumilo, Cornelius Aschermann, Robert Gawlik, Sebastian Schinzel, and Thorsten Holz. 2017. KAFL: Hardware-assisted feedback fuzzing for OS kernels. In Proceedings of the 26th USENIX Security Symposium (Security). Vancouver, BC, Canada."},{"key":"e_1_3_2_1_54_1","unstructured":"SiFive Inc. 2017. The RISC-V Instruction Set Manual. https:\/\/riscv.org\/\/wp-content\/uploads\/2017\/05\/riscv-spec-v2.2.pdf."},{"key":"e_1_3_2_1_55_1","volume-title":"FreePDK: An Open-Source Variation-Aware Design Kit. In 2007 IEEE International Conference on Microelectronic Systems Education (MSE'07)","author":"Stine J. E.","unstructured":"J. E. Stine, I. Castellanos, M. Wood, J. Henson, F. Love, W. R. Davis, P. D. Franzon, M. Bucher, S. Basavarajaiah, J. Oh, and R. Jenkal. 2007. FreePDK: An Open-Source Variation-Aware Design Kit. In 2007 IEEE International Conference on Microelectronic Systems Education (MSE'07)."},{"key":"e_1_3_2_1_56_1","unstructured":"Synopsys. 2020. DC Ultra. https:\/\/www.synopsys.com\/implementation-and-signoff\/rtl-synthesis-test\/dc-ultra.html."},{"key":"e_1_3_2_1_57_1","unstructured":"Cisco Talos. 2014. AFL-Dyninst: AFL fuzzing blackbox binaries. https:\/\/github.com\/Cisco-Talos\/moflow\/tree\/master\/afl-dyninst."},{"key":"e_1_3_2_1_58_1","unstructured":"TechPowerUp. 2020. RISC-V Processor Achieves 5 GHz Frequency at Just 1 Watt of Power. https:\/\/www.techpowerup.com\/275463\/risc-v-processor-achieves-5-ghz-frequency-at-just-1-watt-of-power."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/859618.859655"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.37"},{"key":"e_1_3_2_1_61_1","unstructured":"Michal Zalewski. 2014. american fuzzy lop. http:\/\/lcamtuf.coredump.cx\/afl\/."},{"key":"e_1_3_2_1_62_1","unstructured":"Michal Zalewski. 2019. Fast LLVM-based instrumentation for afl-fuzz. https:\/\/github.com\/google\/AFL\/blob\/master\/llvm_mode\/README.llvm."},{"key":"e_1_3_2_1_63_1","unstructured":"Google Project Zero. 2020. TinyInst: A lightweight dynamic instrumentation library. https:\/\/github.com\/googleprojectzero\/TinyInst."},{"key":"e_1_3_2_1_64_1","volume-title":"PTfuzz: Guided fuzzing with processor trace feedback","author":"Zhang Gen","unstructured":"Gen Zhang, Xu Zhou, Yingqi Luo, Xugang Wu, and Erxue Min. 2018. PTfuzz: Guided fuzzing with processor trace feedback. In IEEE Access (vol. 6)."},{"key":"e_1_3_2_1_65_1","volume-title":"SonicBOOM: The 3rd Generation Berkeley Out-of-Order Machine. In Fourth Workshop on Computer Architecture Research with RISC-V.","author":"Zhao Jerry","year":"2020","unstructured":"Jerry Zhao, Korpan Ben, Gonzalez Abraham, and Asanovic Krste. 2020. SonicBOOM: The 3rd Generation Berkeley Out-of-Order Machine. In Fourth Workshop on Computer Architecture Research with RISC-V."}],"event":{"name":"CCS '21: 2021 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event Republic of Korea","acronym":"CCS '21","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3460120.3484573","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3460120.3484573","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3460120.3484573","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T20:44:01Z","timestamp":1763498641000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3460120.3484573"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,11,12]]},"references-count":65,"alternative-id":["10.1145\/3460120.3484573","10.1145\/3460120"],"URL":"https:\/\/doi.org\/10.1145\/3460120.3484573","relation":{},"subject":[],"published":{"date-parts":[[2021,11,12]]},"assertion":[{"value":"2021-11-13","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}