用生成模型合成芯片图像,解决数据少且保密难的问题。
Overcoming Data Scarcity and Confidentiality in Hardware Assurance via Synthetic Generation

- 用StyleGAN生成多样化的芯片布局,再用Pix2PixHD转为真实扫描电镜图像。
- 仅用合成数据训练的模型在真实图像上表现优于用少量实测数据训练的基线。
- 生成布局无原始设计痕迹,可防反向推导,适合高保密芯片验证场景。
硬件保障依赖扫描电子显微镜(SEM)验证纳米结构,但构建大规模高质量数据集受制于耗时的采集过程和对专有设计的严格知识产权(IP)限制。本文提出一种隐私保护流程:在大幅扭曲功能设计的前提下,从少量初始样本生成视觉逼真的合成数据集。首先,StyleGAN学习硬件版图掩码分布,生成宏观多样的新结构;随后,条件型生成对抗网络(Pix2PixHD)将这些掩码转化为保留真实纹理与噪声的仿真SEM图像。主要发现是:仅基于合成数据训练的分割模型不仅成功实现‘模拟到真实’的迁移,且性能优于仅使用有限真实数据训练的基线模型。由于合成布局具有明显新颖性,未复现原始设计的具体布线特征,部署最终分割模型可有效防范梯度反演和成员推理等攻击,为硬件保障提供高效且高安全性的解决方案。
原文摘要 · Abstract (English)
Hardware assurance relies on scanning electron microscopy (SEM) to verify nanoscale structures, but assembling the large, high-quality datasets required for automated analysis is impeded by time-intensive acquisition and strict intellectual property (IP) constraints on proprietary designs. We propose a privacy-preserving pipeline that secures IP by heavily distorting the functional design while generating a visually realistic synthetic dataset from a small set of initial examples. A StyleGAN first learns the distribution of hardware layout masks to generate novel, macroscopically varied structures. Subsequently, a conditional GAN (Pix2PixHD) translates these masks into realistic SEM images that preserve authentic textures and noise. The primary finding of this work is that a segmentation model trained exclusively on this synthetic data not only demonstrates a successful "sim-to-real" transfer to real images but also outperforms a baseline model trained on the limited real dataset. Because the underlying synthetic layouts are demonstrably novel and reproduce none of the specific proprietary routing of the original design, deploying the final segmentation model mitigates the risk of exposing sensitive IP to attacks like gradient inversion and membership inference, providing a highly secure, high-performance solution for hardware assurance.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。