CPCRFuzz: Adaptive Security-Critical Path and Control-Register Guided Fuzzing for Processor Vulnerability Detection
Processor fuzzing is effective for exposing RTL-level bugs, but existing coverage metrics are only weakly aligned with security-relevant processor behaviors. This paper presents CPCRFuzz, an adaptive fuzzing framework guided by two complementary metrics: security-critical path (SCP) coverage and implementation-level co...