arXiv:2506.17894cs.LGcs.CR2025-06被引 7

用图神经网络检测芯片硬件后门,精度超98%。

TROJAN-GUARD: Hardware Trojans Detection Using GNN in RTL Designs

  • 构建适用于大规模RTL设计的图嵌入框架,融合多种定制GNN模型。
  • 在自建数据集上实现98.66%精度与92.30%召回率。
  • 通过模型量化提升推理效率,适合工业级芯片安全检测。

芯片制造流程复杂,为缩短上市时间,越来越多地采用全球范围内的不可信第三方工具和设计。这增加了攻击者植入硬件后门(HTs)的风险。由于后门隐蔽性强,可能对网络安全、国家经济及个人隐私造成严重威胁。现有基于图神经网络(GNN)的检测方法在大型设计上表现不佳,因其训练依赖小规模设计,且未充分探索适配的GNN架构或高效训练推理机制。本文提出一种新框架,可生成大规模设计(如RISC-V)的图嵌入,并集成专用于HT检测的多种GNN模型。同时引入领域特定技术实现高效训练与推理,包括模型量化——降低权重精度以减少计算开销,提升处理速度,且不影响检测准确率。在自建数据集上的评估显示,该框架达到98.66%的精度和92.30%的召回率,验证了其在大规模芯片设计中检测硬件后门的有效性与高效性。

原文摘要 · Abstract (English)

Chip manufacturing is a complex process, and to achieve a faster time to market, an increasing number of untrusted third-party tools and designs from around the world are being utilized. The use of these untrusted third party intellectual properties (IPs) and tools increases the risk of adversaries inserting hardware trojans (HTs). The covert nature of HTs poses significant threats to cyberspace, potentially leading to severe consequences for national security, the economy, and personal privacy. Many graph neural network (GNN)-based HT detection methods have been proposed. However, they perform poorly on larger designs because they rely on training with smaller designs. Additionally, these methods do not explore different GNN models that are well-suited for HT detection or provide efficient training and inference processes. We propose a novel framework that generates graph embeddings for large designs (e.g., RISC-V) and incorporates various GNN models tailored for HT detection. Furthermore, our framework introduces domain-specific techniques for efficient training and inference by implementing model quantization. Model quantization reduces the precision of the weights, lowering the computational requirements, enhancing processing speed without significantly affecting detection accuracy. We evaluate our framework using a custom dataset, and our results demonstrate a precision of 98.66% and a recall (true positive rate) of 92.30%, highlighting the effectiveness and efficiency of our approach in detecting hardware trojans in large-scale chip designs

硬件安全图神经网络后门检测芯片验证

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。