(Security) Assertions by Large Language Models
arXiv:2306.14027 · doi:10.1109/TIFS.2024.3372809
Abstract
The security of computer systems typically relies on a hardware root of trust. As vulnerabilities in hardware can have severe implications on a system, there is a need for techniques to support security verification activities. Assertion-based verification is a popular verification technique that involves capturing design intent in a set of assertions that can be used in formal verification or testing-based checking. However, writing security-centric assertions is a challenging task. In this work, we investigate the use of emerging large language models (LLMs) for code generation in hardware assertion generation for security, where primarily natural language prompts, such as those one would see as code comments in assertion files, are used to produce SystemVerilog assertions. We focus our attention on a popular LLM and characterize its ability to write assertions out of the box, given varying levels of detail in the prompt. We design an evaluation framework that generates a variety of prompts, and we create a benchmark suite comprising real-world hardware designs and corresponding golden reference assertions that we want to generate with the LLM.
This article has been accepted for publication in IEEE Transactions on Information Forensics and Security. This is the author's version. See https://ieeexplore.ieee.org/document/10458667 for the published version of the paper. Citation information: DOI 10.1109/TIFS.2024.3372809. See https://www.ieee.org/publications/rights/index.html for information on publication rights
References in corpus (10)
- Evaluating Large Language Models Trained on Code
- CodeGen: An Open Large Language Model for Code with Multi-Turn Program Synthesis
- LLM4SecHW: Leveraging Domain Specific Large Language Model for Hardware Debugging
- TheHuzz: Instruction Fuzzing of Processors Using Golden-Reference Models for Finding Software-Exploitable Vulnerabilities
- Neural Program Repair: Systems, Challenges and Solutions
- Unlocking Hardware Security Assurance: The Potential of LLMs
- DIVAS: An LLM-based End-to-End Framework for SoC Security Analysis and Policy-based Protection
- Using LLMs to Facilitate Formal Verification of RTL
- HyPFuzz: Formal-Assisted Processor Fuzzing
- LLM4DV: Using Large Language Models for Hardware Test Stimuli Generation