arXiv:2501.16347cs.LGcs.AI2025-01被引 1

用近邻法+机器学习,快速精准定位芯片中的恶意门电路。

Fast and Accurate Identification of Hardware Trojan Locations in Gate-Level Netlist using Nearest Neighbour Approach integrated with Machine Learning Technique

  • 结合近邻算法与图神经网络,从电路网表中识别恶意逻辑门。
  • 最近邻法在检测准确率上优于传统GNN模型,2阶近邻达97.7%。
  • 适合芯片安全检测人员快速定位硬件木马,提升验证效率。

在集成电路设计日益复杂的背景下,多实体协作设计中的硬件木马(HTs)检测面临巨大挑战。本文提出一种基于机器学习的创新方法,用于识别门级网表中的恶意逻辑门。通过路径回溯算法,研究在三个案例中验证该方法:案例一采用决策树进行节点间比较,并结合主成分分析(PCA)显著提升检测准确率;案例二引入图神经网络(GNN)进行图对图分类,区分正常与木马感染电路;案例三应用GNN节点分类识别具体受控节点位置。此外,将最近邻(NN)方法分别融合于案例二的图对图分类和案例三的节点对节点分类中。尽管GNN在图对图分类中准确率为62.8%,但最近邻法表现更优:1阶近邻达73.2%,2阶近邻达97.7%。同样,在节点分类中,1阶近邻准确率93%,2阶近邻达97.7%,远超GNN的79.8%。然而,随着近邻阶数增加,代码覆盖率也显著上升。

原文摘要 · Abstract (English)

In the evolving landscape of integrated circuit design, detecting Hardware Trojans (HTs) within a multi entity based design cycle presents significant challenges. This research proposes an innovative machine learning-based methodology for identifying malicious logic gates in gate-level netlists. By focusing on path retrace algorithms. The methodology is validated across three distinct cases, each employing different machine learning models to classify HTs. Case I utilizes a decision tree algorithm for node-to-node comparisons, significantly improving detection accuracy through the integration of Principal Component Analysis (PCA). Case II introduces a graph-to-graph classification using a Graph Neural Network (GNN) model, enabling the differentiation between normal and Trojan-infected circuit designs. Case III applies GNN-based node classification to identify individual compromised nodes and its location. Additionally, nearest neighbor (NN) method has been combined with GNN graph-to-graph in Case II and GNN node-to-node in Case III. Despite the potential of GNN model graph-to-graph classification, NN approach demonstrated superior performance, with the first nearest neighbor (1st NN) achieving 73.2% accuracy and the second nearest neighbor (2nd NN) method reaching 97.7%. In comparison, the GNN model achieved an accuracy of 62.8%. Similarly, GNN model node-to-node classification, NN approach demonstrated superior performance, with the 1st NN achieving 93% accuracy and the 2nd NN method reaching 97.7%. In comparison, the GNN model achieved an accuracy of 79.8%. However, higher and higher NN will lead to large code coverage for the identification of HTs.

硬件安全机器学习木马检测图神经网络

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。