Abstract:System-on-chip (SoC) developers increasingly rely on pre-verified hardware intellectual property (IP) blocks often acquired from untrusted third-party vendors. These IPs might contain hidden malicious functionalities or hardware Trojans that may compromise the security of the fabricated SoCs. Lack of golden or reference models and vast possible Trojan attack space form some of the major barriers in detecting hardware Trojans in these third-party IP (3PIP) blocks. Recently, supervised machine learning (ML) techniques have shown promising capability in identifying nets of potential Trojans in 3PIPs without the need of golden models. However, they bring several major challenges. First, they do not guide us to an optimal choice of features that reliably covers diverse classes of Trojans. Second, they require multiple Trojan-free/trusted designs to insert known Trojans and generate a trained model. Even if a set of trusted designs are available for training, the suspect IP can have inherently very different structure from the set of trusted designs, which may negatively impact the verification outcome. Third, these techniques only identify a set of suspect Trojan nets that require manual intervention to understand the potential threat. In this paper, we present VIPR, a systematic machine learning (ML) based trust verification solution for 3PIPs that eliminates the need for trusted designs for training. We present a comprehensive framework, associated algorithms, and a tool flow for obtaining an optimal set of features, training a targeted machine learning model, detecting suspect nets, and identifying Trojan circuitry from the suspect nets. We evaluate the framework on several Trust-Hub Trojan benchmarks and provide a comparative analysis of detection performance across different trained models, selection of features, and post-processing techniques. We demonstrate promising Trojan detection accuracy for VIPR with up to 92.85% reduction in false positives by the proposed post-processing algorithm.

Hardware Trojan Detection in Third-Party Digital Intellectual Property Cores by Multilevel Feature Analysis

Hardware Trojans in Chips: A Survey for Detection and Prevention

Design for Assurance: Employing Functional Verification Tools for Thwarting Hardware Trojan Threat in 3PIPs

FASTrust: Feature analysis for third-party IP trust verification

The State-of-the-art in EDA tools: the Hardware Trojan Confrontation Framework

Hardware Trojan Detection through Information Flow Security Verification

A Hardware-Trojans Detection Approach Based on eXtreme Gradient Boosting

Stealthy Trojan Detection Based on Feature Analysis of Circuit Structure

TPAD: Hardware Trojan Prevention and Detection for Trusted Integrated Circuits

HLIFT: A High-Level Information Flow Tracking Method for Detecting Hardware Trojans

A General Framework for Hardware Trojan Detection in Digital Circuits by Statistical Learning Algorithms

Advancing the State-of-the-Art in Hardware Trojans Design

A PCA Based SVM Hardware Trojan Detection Approach

Hardware Trojan Detection Combine with Machine Learning: an SVM-based Detection Approach

Hardware IP Assurance against Trojan Attacks with Machine Learning and Post-processing

Contrastive Graph Convolutional Networks for Hardware Trojan Detection in Third Party IP Cores

Third-Party Hardware IP Assurance against Trojans through Supervised Learning and Post-processing

A Multi-Level Architecture for Hardware Trojan and Vulnerability Runtime Detection and Response Towards Cryptographic IP.

Hardware Trojan Detection Combines with Machine Learning: an Isolation Forest-based Detection Method

Hardware Trojan Detection Using Effective Property-Checking Method

On-Chip Analog Trojan Detection Framework for Microprocessor Trustworthiness