LAsset: An LLM-assisted Security Asset Identification Framework for System-on-Chip (SoC) Verification
By: Md Ajoad Hasan , Dipayan Saha , Khan Thamid Hasan and more
Potential Business Impact:
Finds hidden security problems in computer chips.
The growing complexity of modern system-on-chip (SoC) and IP designs is making security assurance difficult day by day. One of the fundamental steps in the pre-silicon security verification of a hardware design is the identification of security assets, as it substantially influences downstream security verification tasks, such as threat modeling, security property generation, and vulnerability detection. Traditionally, assets are determined manually by security experts, requiring significant time and expertise. To address this challenge, we present LAsset, a novel automated framework that leverages large language models (LLMs) to identify security assets from both hardware design specifications and register-transfer level (RTL) descriptions. The framework performs structural and semantic analysis to identify intra-module primary and secondary assets and derives inter-module relationships to systematically characterize security dependencies at the design level. Experimental results show that the proposed framework achieves high classification accuracy, reaching up to 90% recall rate in SoC design, and 93% recall rate in IP designs. This automation in asset identification significantly reduces manual overhead and supports a scalable path forward for secure hardware development.
Similar Papers
Toward Automated Potential Primary Asset Identification in Verilog Designs
Cryptography and Security
Finds computer chip security problems automatically.
LASHED: LLMs And Static Hardware Analysis for Early Detection of RTL Bugs
Cryptography and Security
Finds hidden computer chip security flaws.
LLMs, You Can Evaluate It! Design of Multi-perspective Report Evaluation for Security Operation Centers
Cryptography and Security
Helps computers write better security reports.