Abstract:Intellectual property (IP) protection is one of the hardcore problems in hardware security. Semiconductor industry still lacks effective and proactive defense to shield IPs from reverse engineering (RE) based attacks. Integrated circuit (IC) camouflaging technique fills this gap by replacing some conventional logic gates in the IPs with specially designed logic cells (called camouflaged gates) without changing the functions of the IPs. The camouflaged gates can perform different logic functions while maintaining an identical look to RE attackers, thus preventing them from obtaining the layout information of the IP directly from RE tools. Since it was first proposed in 2012, circuit camouflaging has become one of the hottest research topics in hardware security focusing on two fundamental problems. How to choose the types of camouflaged gates and decide where to insert them in order to simultaneously minimize the performance overhead and optimize the RE complexity? How can an attacker de-camouflage a camouflaged circuit and complete the RE attack? In this article, we review the evolution of circuit camouflaging through this spear and shield race. First, we introduce the design methods of four different kinds of camouflaged cells based on true/dummy contacts, static random access memory (SRAM), doping, and emerging devices, respectively. Then we elaborate four representative de-camouflaging attacks: brute force attack, IC testing based attack, satisfiability-based (SAT-based) attack, and the circuit partition based attack, and the corresponding countermeasures: clique-based camouflaging, CamoPerturb, AND-tree camouflaging, and equivalent class based camouflaging, respectively. We argue that the current research efforts should be on reducing overhead introduced by circuit camouflaging and defeating de-camouflaging attacks. We point out that exploring features of emerging devices could be a promising direction. Finally, as a complement to circuit camouflaging, we conclude with a brief review of other state-of-the-art IP protection techniques.

GNNReveal: A Novel Graph Neural Network-based Attack Method for IC Logic Gate De-Camouflaging

Devil in Disguise: Breaching Graph Neural Networks Privacy through Infiltration

Ignnvd: A Novel Software Vulnerability Detection Model Based on Integrated Graph Neural Networks

GNNUnlock: Graph Neural Networks-based Oracle-less Unlocking Scheme for Provably Secure Logic Locking

GNN-RE: Graph Neural Networks for Reverse Engineering of Gate-Level Netlists

Is The Secure Ic Camouflaging Really Secure?

AttackGNN: Red-Teaming GNNs in Hardware Security Using Reinforcement Learning

PoisonedGNN: Backdoor Attack on Graph Neural Networks-based Hardware Security Systems

A Unioned Graph Neural Network Based Hardware Trojan Node Detection

FP-GNN: A Graph Neural Network for Hardware Trojan Detection in Gate-Level Netlist

Contrastive Graph Convolutional Networks for Hardware Trojan Detection in Third Party IP Cores

ReIGNN: State Register Identification Using Graph Neural Networks for Circuit Reverse Engineering

Explanatory subgraph attacks against Graph Neural Networks

UNTANGLE: Unlocking Routing and Logic Obfuscation Using Graph Neural Networks-based Link Prediction

GNN4IP: Graph Neural Network for Hardware Intellectual Property Piracy Detection

GANI: Global Attacks on Graph Neural Networks Via Imperceptible Node Injections

An Empirical Study on Gate Camouflaging Methods Against Circuit Partition Attack.

AppGNN: Approximation-Aware Functional Reverse Engineering using Graph Neural Networks

Spear and Shield: Evolution of Integrated Circuit Camouflaging

Adversarial Camouflage for Node Injection Attack on Graphs

LIPSTICK: Corruptibility-Aware and Explainable Graph Neural Network-based Oracle-Less Attack on Logic Locking