{"id":"https://openalex.org/W4416429484","doi":"https://doi.org/10.1109/iccad66269.2025.11240887","title":"BMCFuzz: Hybrid Verification of Processors by Synergistic Integration of Bound Model Checking and Fuzzing","display_name":"BMCFuzz: Hybrid Verification of Processors by Synergistic Integration of Bound Model Checking and Fuzzing","publication_year":2025,"publication_date":"2025-10-26","ids":{"openalex":"https://openalex.org/W4416429484","doi":"https://doi.org/10.1109/iccad66269.2025.11240887"},"language":null,"primary_location":{"id":"doi:10.1109/iccad66269.2025.11240887","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccad66269.2025.11240887","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM International Conference On Computer Aided Design (ICCAD)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026327360","display_name":"Shidong Shen","orcid":"https://orcid.org/0009-0000-0369-021X"},"institutions":[{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"id":"https://openalex.org/I4391767820","display_name":"State Key Laboratory of Computer Science","ror":"https://ror.org/01hsx4r68","country_code":null,"type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818","https://openalex.org/I4391767820"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Shidong Shen","raw_affiliation_strings":["Institute of Software, Chinese Academy of Sciences,Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science,Beijing,China"],"affiliations":[{"raw_affiliation_string":"Institute of Software, Chinese Academy of Sciences,Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science,Beijing,China","institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I19820366","https://openalex.org/I4391767820"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100329180","display_name":"Jinyu Liu","orcid":"https://orcid.org/0000-0002-7050-0946"},"institutions":[{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4391767820","display_name":"State Key Laboratory of Computer Science","ror":"https://ror.org/01hsx4r68","country_code":null,"type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818","https://openalex.org/I4391767820"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinyu Liu","raw_affiliation_strings":["Institute of Software, Chinese Academy of Sciences,Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science,Beijing,China"],"affiliations":[{"raw_affiliation_string":"Institute of Software, Chinese Academy of Sciences,Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science,Beijing,China","institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I19820366","https://openalex.org/I4391767820"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025792526","display_name":"Weizhi Feng","orcid":"https://orcid.org/0000-0003-0710-223X"},"institutions":[{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"id":"https://openalex.org/I4391767820","display_name":"State Key Laboratory of Computer Science","ror":"https://ror.org/01hsx4r68","country_code":null,"type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818","https://openalex.org/I4391767820"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weizhi Feng","raw_affiliation_strings":["Institute of Software, Chinese Academy of Sciences,Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science,Beijing,China"],"affiliations":[{"raw_affiliation_string":"Institute of Software, Chinese Academy of Sciences,Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science,Beijing,China","institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I19820366","https://openalex.org/I4391767820"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027425633","display_name":"Fu Song","orcid":"https://orcid.org/0000-0002-0581-2679"},"institutions":[{"id":"https://openalex.org/I4391767820","display_name":"State Key Laboratory of Computer Science","ror":"https://ror.org/01hsx4r68","country_code":null,"type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818","https://openalex.org/I4391767820"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fu Song","raw_affiliation_strings":["Institute of Software, Chinese Academy of Sciences,Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science,Beijing,China"],"affiliations":[{"raw_affiliation_string":"Institute of Software, Chinese Academy of Sciences,Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science,Beijing,China","institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I19820366","https://openalex.org/I4391767820"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100381605","display_name":"Zhilin Wu","orcid":"https://orcid.org/0000-0003-0899-628X"},"institutions":[{"id":"https://openalex.org/I4391767820","display_name":"State Key Laboratory of Computer Science","ror":"https://ror.org/01hsx4r68","country_code":null,"type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818","https://openalex.org/I4391767820"]},{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhilin Wu","raw_affiliation_strings":["Institute of Software, Chinese Academy of Sciences,Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science,Beijing,China"],"affiliations":[{"raw_affiliation_string":"Institute of Software, Chinese Academy of Sciences,Key Laboratory of System Software (Chinese Academy of Sciences) and State Key Laboratory of Computer Science,Beijing,China","institution_ids":["https://openalex.org/I4210128818","https://openalex.org/I19820366","https://openalex.org/I4391767820"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5026327360"],"corresponding_institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210128818","https://openalex.org/I4391767820"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.34369638,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.46860000491142273,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.46860000491142273,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10142","display_name":"Formal Methods in Verification","score":0.32249999046325684,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.09539999812841415,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9072999954223633},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.7353000044822693},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.7168999910354614},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.49559998512268066},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4480000138282776},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.36070001125335693}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9072999954223633},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8206999897956848},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.7353000044822693},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.7168999910354614},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.49559998512268066},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4480000138282776},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.382099986076355},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.37049999833106995},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.36070001125335693},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3546999990940094},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.34860000014305115},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.3303000032901764},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.3109000027179718},{"id":"https://openalex.org/C75606506","wikidata":"https://www.wikidata.org/wiki/Q1049183","display_name":"Formal methods","level":2,"score":0.2712000012397766},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.26589998602867126},{"id":"https://openalex.org/C3017489831","wikidata":"https://www.wikidata.org/wiki/Q2393193","display_name":"Running time","level":2,"score":0.26260000467300415},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2606000006198883}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iccad66269.2025.11240887","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccad66269.2025.11240887","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM International Conference On Computer Aided Design (ICCAD)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321133","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W126105586","https://openalex.org/W220440441","https://openalex.org/W1513012091","https://openalex.org/W1538310240","https://openalex.org/W1983394510","https://openalex.org/W2296231679","https://openalex.org/W2536379404","https://openalex.org/W2798776451","https://openalex.org/W2899727632","https://openalex.org/W2912640545","https://openalex.org/W3031594835","https://openalex.org/W3092493782","https://openalex.org/W3154674654","https://openalex.org/W4280563703","https://openalex.org/W4281749436","https://openalex.org/W4308083752","https://openalex.org/W4308632293","https://openalex.org/W4327930474","https://openalex.org/W4378192144","https://openalex.org/W4379115991","https://openalex.org/W4384521894","https://openalex.org/W4388535391","https://openalex.org/W4393140672","https://openalex.org/W4400973078","https://openalex.org/W4401568309","https://openalex.org/W4404133543","https://openalex.org/W4404134106","https://openalex.org/W4404657415","https://openalex.org/W4408353696"],"related_works":[],"abstract_inverted_index":{"Modern":[0],"processors":[1],"are":[2,20,134,163],"becoming":[3],"increasingly":[4],"complicated,":[5],"making":[6],"them":[7],"hard":[8],"to":[9,49,72,111,121,153,166,224],"be":[10],"bug-free.":[11],"Bounded":[12],"model":[13],"checking":[14],"(BMC)":[15],"and":[16,59,78,101,108,129,176,185,200,213,228,248],"coverage-guided":[17],"fuzzing":[18],"(CGF)":[19],"two":[21],"main":[22],"complementary":[23],"techniques":[24],"for":[25,52,61,169,244],"verifying":[26,62],"processors.":[27],"BMC":[28,100,107,143,162,175,179],"can":[29],"exhaustively":[30,154],"explore":[31,123,155],"the":[32,42,69,73,83,124,139,159,181,225,235],"state-space":[33,44,182],"upto":[34],"a":[35,91,196,240],"given":[36],"path-depth":[37],"bound,":[38],"but":[39,66],"suffers":[40],"from":[41],"infamous":[43],"explosion":[45,183],"problem,":[46],"thus":[47],"limited":[48],"smaller":[50],"bounds":[51],"realistic":[53],"processor":[54,208,246],"designs.":[55],"CGF":[56,109,118,177,187],"is":[57,119,151],"efficient":[58],"scalable":[60],"large-scale":[63],"complex":[64],"designs,":[65],"struggles":[67],"with":[68,144,188],"coverage":[70,222],"due":[71],"difficulty":[74],"in":[75,114],"generating":[76],"comprehensive":[77],"diverse":[79],"seeds.":[80,191],"To":[81],"bring":[82],"best":[84],"of":[85,137,161,174,237],"both":[86],"worlds,":[87],"we":[88],"propose":[89],"BMCFuzz,":[90],"novel":[92],"two-way":[93],"hybrid":[94],"verification":[95],"approach":[96],"that":[97,133,218],"synergistically":[98],"integrates":[99],"CGF.":[102,170],"Specifically,":[103],"BMCFuzz":[104,194,219,238],"alternatively":[105],"switches":[106],"according":[110],"their":[112],"performance":[113],"improving":[115],"coverage,":[116],"where":[117],"leveraged":[120],"quickly":[122],"state":[125],"space,":[126],"detect":[127],"flaws,":[128],"moreover":[130],"record":[131],"snapshots":[132,147],"crucial":[135],"valuations":[136],"all":[138],"circuit-level":[140],"registers,":[141],"while":[142],"selected":[145],"high-valuable":[146],"as":[148,195,239],"initial":[149],"states":[150],"utilized":[152],"uncovered":[156],"points.":[157],"Moreover,":[158],"witnesses":[160],"further":[164],"used":[165],"generate":[167],"seeds":[168],"This":[171],"synergistic":[172],"integration":[173],"helps":[178],"alleviate":[180],"problem":[184],"feeds":[186],"more":[189],"high-quality":[190],"We":[192],"implement":[193],"fully":[197],"open-source":[198,206,242],"tool":[199,243],"evaluate":[201],"it":[202],"on":[203],"three":[204,230],"well-known":[205],"RISC-V":[207],"designs":[209],"(i.e.,":[210],"NutShell,":[211],"Rocket,":[212],"BOOM).":[214],"Experimental":[215],"results":[216],"show":[217],"achieves":[220],"higher":[221],"compared":[223],"state-of-the-art":[226],"methods":[227],"discovers":[229],"previously":[231],"unknown":[232],"bugs,":[233],"demonstrating":[234],"potential":[236],"powerful,":[241],"advancing":[245],"design":[247],"verification.":[249]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-11-20T00:00:00"}