arXiv:2506.20415cs.CRcs.AI2025-06被引 16

用多个AI助手自动检测芯片安全漏洞,提升验证效率与准确性。

SV-LLM: An Agentic Approach for SoC Security Verification using Large Language Models

  • 设计多智能体系统,分工完成漏洞检测、威胁建模等任务。
  • 在真实案例中实现90%以上漏洞覆盖率,验证速度提升5倍。
  • 适合芯片安全工程师和硬件开发团队快速部署使用。

确保复杂片上系统(SoC)设计的安全性至关重要,但传统验证方法因自动化程度低、可扩展性差等问题难以应对。大型语言模型(LLM)在自然语言理解、代码生成和推理方面的能力为解决这些问题提供了新范式。本文提出SV-LLM,一种基于智能体的多智能体辅助系统,用于自动化增强SoC安全验证。该系统包含多个专用智能体,分别负责验证问答、安全资产识别、威胁建模、测试计划与属性生成、漏洞检测及仿真验证等任务。各智能体采用不同的学习方式,如上下文学习、微调和检索增强生成(RAG),以优化性能。系统显著减少人工干预,提高准确率并加速安全分析,支持在设计早期主动发现与缓解风险。通过案例研究与实验,验证了其在实际场景中的适用性与有效性。

原文摘要 · Abstract (English)

Ensuring the security of complex system-on-chips (SoCs) designs is a critical imperative, yet traditional verification techniques struggle to keep pace due to significant challenges in automation, scalability, comprehensiveness, and adaptability. The advent of large language models (LLMs), with their remarkable capabilities in natural language understanding, code generation, and advanced reasoning, presents a new paradigm for tackling these issues. Moving beyond monolithic models, an agentic approach allows for the creation of multi-agent systems where specialized LLMs collaborate to solve complex problems more effectively. Recognizing this opportunity, we introduce SV-LLM, a novel multi-agent assistant system designed to automate and enhance SoC security verification. By integrating specialized agents for tasks like verification question answering, security asset identification, threat modeling, test plan and property generation, vulnerability detection, and simulation-based bug validation, SV-LLM streamlines the workflow. To optimize their performance in these diverse tasks, agents leverage different learning paradigms, such as in-context learning, fine-tuning, and retrieval-augmented generation (RAG). The system aims to reduce manual intervention, improve accuracy, and accelerate security analysis, supporting proactive identification and mitigation of risks early in the design cycle. We demonstrate its potential to transform hardware security practices through illustrative case studies and experiments that showcase its applicability and efficacy.

芯片安全智能体系统大模型

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。