DIVAS: An LLM-based End-to-End Framework for SoC Security Analysis and Policy-based Protection
Open accessAbstract
Securing critical assets in a bus-based System-On-Chip (SoC) is imperative to mitigate potential vulnerabilities and prevent unauthorized access, ensuring the integrity, availability, and confidentiality of the system. Ensuring security throughout the SoC design process is a formidable task owing to the inherent intricacies in SoC designs and the dispersion of assets across diverse IPs. Large Language Models (LLMs), exemplified by ChatGPT (OpenAI) and BARD (Google), have showcased remarkable proficiency across various domains, including security vulnerability detection and prevention in SoC designs. In this work, we propose DIVAS, a novel framework that leverages the knowledge base of LLMs to identify security vulnerabilities from user-defined SoC specifications, map them to the relevant Common Weakness Enumerations (CWEs), followed by the generation of equivalent assertions, and employ security measures through enforcement of security policies. The proposed framework is implemented using multiple ChatGPT and BARD models, and their performance was analyzed while generating relevant CWEs from the SoC specifications provided. The experimental results obtained from open-source SoC benchmarks demonstrate the efficacy of our proposed framework.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
DIVAS automates vulnerability detection and policy enforcement, reducing manual effort and enhancing SoC security.
“DIVAS automates the process of vulnerability detection and policy enforcement, reducing manual effort and enhancing SoC security.”
From When LLMs meet cybersecurity: a systematic literature review (2025) · cites this paper as Paria et al. (2023)
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
The publisher hasn’t deposited this paper’s reference list.
Research works printed but not linked: 23
- G. Dessouky, D. Gens, P. Haney, G. Persyn, A. Kanuparthi, H. Khattri, J. M. Fung, A.-R. Sadeghi, and J. Rajendran, "HardFails: Insights into Software-Exploitable hardware bugs," in 28th USENIX Security Symposium (USENIX Security 19). Santa Clara, CA: USENIX Association, Aug. 2019, pp. 213-230. https://www.usenix.org/conference/ usenixsecurity19/presentation/dessouky
- M. M. Bidmeshki, Y. Zhang, M. Zaman, L. Zhou, and Y. Makris, "Hunting security bugs in soc designs: Lessons learned," IEEE Design & Test, vol. 38, no. 1, pp. 22-29, 2021.
- S. Sudhakrishnan, J. Madhavan, E. Jr, and J. Renau, "Under- standing bug fix patterns in Verilog," 05 2008, pp. 39-42.
- B. Ahmad, W.-K. Liu, L. Collini, H. Pearce, J. M. Fung, J. Valamehr, M. Bidmeshki, P. Sapiecha, S. Brown, K. Chakrabarty, R. Karri, and B. Tan, "Don't CWEAT It: Toward CWE Analysis Techniques in Early Stages of Hardware Design," in Proceedings of the 41st IEEE/ACM International Conference on Computer-Aided Design, ser. ICCAD '22. New York, NY, USA: Association for Computing Machinery, 2022. https://doi.org/10.1145/3508352.3549369 · DOI
- K. Nienhuis, A. Joannou, T. Bauereiss, A. Fox, M. Roe, B. Campbell, M. Naylor, R. M. Norton, S. W. Moore, P. G. Neumann, I. Stark, R. N. M. Watson, and P. Sewell, "Rigorous engineering for hardware security: Formal modelling and proof in the CHERI design and implementation process," in 2020 IEEE Symposium on Security and Privacy (SP), 2020, pp. 1003- 1020.
- P. Budzianowski and I. Vulic, "Hello, It's GPT-2 -How Can I Help You? Towards the Use of Pretrained Language Models for Task-Oriented Dialogue Systems," CoRR, vol. abs/1907.05774, 2019. http://arxiv.org/abs/1907.05774 · arXiv
- R. Dale, "GPT-3: What's it good for?" Natural Language En- gineering, vol. 27, no. 1, p. 113-118, 2021.
- Y. Liu, M. Ott, N. Goyal, J. Du, M. Joshi, D. Chen, O. Levy, M. Lewis, L. Zettlemoyer, and V. Stoyanov, "RoBERTa: A Robustly Optimized BERT Pretraining Approach," CoRR, vol. abs/1907.11692, 2019. http://arxiv.org/abs/1907.11692 · arXiv
- J. B. Nielsen and V. Rijmen, Eds., Advances in Cryptology - EUROCRYPT 2018 -37th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Tel Aviv, Israel, April 29 -May 3, 2018 Proceedings, Part II, ser. Lecture Notes in Computer Science, vol. 10821. Springer, 2018. https://doi.org/10.1007/978-3-319-78375-8 · DOI
- J. He, X. Guo, T. Meade, R. G. Dutta, Y. Zhao, and Y. Jin, "Soc interconnection protection through formal verification," Integration, vol. 64, pp. 143-151, 2019. https://www. sciencedirect.com/science/article/pii/S016792601830289X
- S. Ray, N. Ghosh, R. J. Masti, A. Kanuparthi, and J. M. Fung, "Invited: Formal verification of security critical hardware- firmware interactions in commercial socs," in 2019 56th ACM/IEEE Design Automation Conference (DAC), 2019, pp. 1-4.
- J. Sepulveda, D. Aboul-Hassan, G. Sigl, B. Becker, and M. Sauer, "Towards the formal verification of security properties of a network-on-chip router," in 2018 IEEE 23rd European Test Symposium (ETS), 2018, pp. 1-6.
- A. Ardeshiricham, W. Hu, J. Marxen, and R. Kastner, "Register transfer level information flow tracking for provably secure hardware design," in Design, Automation & Test in Europe Conference & Exhibition (DATE), 2017, 2017, pp. 1691-1696.
- W. Hu, B. Mao, J. Oberg, and R. Kastner, "Detecting hardware trojans with gate-level information-flow tracking," Computer, vol. 49, no. 8, p. 44-52, aug 2016. https: //doi.org/10.1109/MC.2016.225 · DOI
- D. Zhang, Y. Wang, G. Suh, and A. Myers, "A hardware design language for timing-sensitive information-flow security," ACM SIGPLAN Notices, vol. 50, pp. 503-516, 05 2015.
- S. K. Muduli, G. Takhar, and P. Subramanyan, "Hyperfuzzing for soc security validation," in Proceedings of the 39th International Conference on Computer-Aided Design, ser. ICCAD '20. New York, NY, USA: Association for Computing Machinery, 2020. https://doi.org/10.1145/3400302.3415709 · DOI
- T. Trippel, K. G. Shin, A. Chernyakhovsky, G. Kelly, D. Rizzo, and M. Hicks, "Fuzzing hardware like software," CoRR, vol. abs/2102.02308, 2021. https://arxiv.org/abs/2102.02308 · arXiv
- R. Kande, A. Crump, G. Persyn, P. Jauernig, A.-R. Sadeghi, A. Tyagi, and J. Rajendran, "TheHuzz: Instruction fuzzing of processors using Golden-Reference models for finding Software-Exploitable vulnerabilities," in 31st USENIX Security Symposium (USENIX Security 22). Boston, MA: USENIX Association, Aug. 2022, pp. 3219-3236. https://www.usenix. org/conference/usenixsecurity22/presentation/kande
- M. Hicks, C. Sturton, S. T. King, and J. M. Smith, "Specs: A lightweight runtime mechanism for protecting software from security-critical processor bugs," in Proceedings of the Twentieth International Conference on Architectural Support for Programming Languages and Operating Systems, ser. ASPLOS '15. New York, NY, USA: Association for Computing Machinery, 2015, p. 517-529. https://doi.org/10. 1145/2694344.2694366 · DOI
- M. Mushtaq, J. Bricq, M. K. Bhatti, A. Akram, V. Lapotre, G. Gogniat, and P. Benoit, "Whisper: A tool for run-time detection of side-channel attacks," IEEE Access, vol. 8, pp. 83 871-83 900, 2020.
- S. R. Sarangi, A. Tiwari, and J. Torrellas, "Phoenix: Detecting and recovering from permanent processor design bugs with programmable hardware," in 39th Annual IEEE/ACM International Symposium on Microarchitecture (MICRO-39 2006), 9-13 December 2006, Orlando, Florida, USA. IEEE Computer Society, 2006, pp. 26-37. https://doi.org/10.1109/ MICRO.2006.41 · DOI
- F. Farahmandi, Y. Huang, and P. Mishra, System-on-Chip Security: Validation and Verification. Springer, 2019.
- P. Bhamidipati, S. M. Achyutha, and R. Vemuri, "Security Analysis of a System-on-Chip Using Assertion-Based Verifi- cation," in 2021 IEEE International Midwest Symposium on Circuits and Systems (MWSCAS), 2021, pp. 826-831.
Cited by
Sorted by citations
A survey on large language model (LLM) security and privacy: The Good, The Bad, and The Ugly
Yao, Y., Duan, J., Xu, K., Cai, Y., Sun, Z., & Zhang, Y. (2024) · High-Confidence Computing · doi:10.1016/j.hcc.2024.100211 · Cited by 1,083 · see citing works
When LLMs meet cybersecurity: a systematic literature review
Zhang, J., Bu, H., Wen, H., Liu, Y., Fei, H., Xi, R., Li, L., Yang, Y., Zhu, H., & Meng, D. (2025) · Cybersecurity · doi:10.1186/s42400-025-00361-w · Cited by 220 · see citing works
Large Language Models for Cyber Security: A Systematic Literature Review
Xu, H., Wang, S., Li, N., Wang, K., Zhao, Y., Chen, K., Yu, T., Liu, Y., & Wang, H. (2025) · ACM Transactions on Software Engineering and Methodology · doi:10.1145/3769676 · Cited by 189 · see citing works
(Security) Assertions by Large Language Models
Kande, R., Pearce, H. A., Tan, B., Dolan-Gavitt, B., Thakur, S., Karri, R., & Rajendran, J. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3372809 · Cited by 122 · see citing works
LLM for SoC Security: A Paradigm Shift
Saha, D., Tarek, S., Yahyaei, K., Saha, S. K., Zhou, J., Tehranipoor, M. M., & Farahmandi, F. (2024) · IEEE Access · doi:10.1109/access.2024.3427369 · Cited by 113 · see citing works
MG-Verilog: Multi-grained Dataset Towards Enhanced LLM-assisted Verilog Generation
Zhang, Y.-A., Yu, Z., Fu, Y., Wan, C., & Lin, Y. (2024) · IEEE LLM Aided Design Workshop (LAD) · doi:10.1109/lad62341.2024.10691738 · Cited by 56 · see citing works
Chen, Y., Arunasalam, A., & Celik, Z. B. (2023) · Annual Computer Security Applications Conference · doi:10.1145/3627106.3627196 · Cited by 45 · see citing works
Customized Retrieval Augmented Generation and Benchmarking for EDA Tool Documentation QA
Pu, Y., He, Z., Qiu, T., Wu, H., & Yu, B. (2024) · International Conference on Computer Aided Design · doi:10.1145/3676536.3676730 · Cited by 29 · see citing works
The potential of LLMs in hardware design
Alsaqer, S., Alajmi, S., Ahmad, I., & Alfailakawi, M. G. (2024) · Journal of Engineering Research · doi:10.1016/j.jer.2024.08.001 · Cited by 27 · see citing works
Hardware Trojan Detection in Open-Source Hardware Designs Using Machine Learning
Hayashi, V. T., & Ruggiero, W. V. (2025) · IEEE Access · doi:10.1109/access.2025.3546156 · Cited by 27 · see citing works
Evolutionary Large Language Models for Hardware Security: A Comparative Survey
Akyash, M., & Kamali, H. M. (2024) · ACM Great Lakes Symposium on VLSI (GLSVLSI) · doi:10.1145/3649476.3660390 · Cited by 26 · see citing works
Harnessing the Power of General-Purpose LLMs in Hardware Trojan Design
Kokolakis, G., Moschos, A., & Keromytis, A. D. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-61486-6_11 · Cited by 25 · see citing works
LASP: LLM Assisted Security Property Generation for SoC Verification
Ayalasomayajula, A., Guo, R., Zhou, J., Saha, S. K., & Farahmandi, F. (2024) · 2024 ACM/IEEE 6th Symposium on Machine Learning for CAD (MLCAD) · doi:10.1109/mlcad62225.2024.10740198 · Cited by 15 · see citing works
LLM-IFT: LLM-Powered Information Flow Tracking for Secure Hardware
Mashnoor, N., Akyash, M., Kamali, H. M., & Azar, K. Z. (2025) · IEEE VLSI Test Symposium (VTS) · doi:10.1109/vts65138.2025.11022949 · Cited by 15 · see citing works
Large Language Models for EDA: Future or Mirage?
He, Z., Pu, Y., Wu, H., Qiu, T., & Yu, B. (2025) · ACM Transactions on Design Automation of Electronic Systems · doi:10.1145/3736167 · Cited by 12 · see citing works
Kumar, A., Salim, M. M., Camacho, D., & Park, J. H. (2025) · Computer Networks · doi:10.1016/j.comnet.2025.111379 · Cited by 12 · see citing works
A Generalize Hardware Debugging Approach for Large Language Models Semi-Synthetic, Datasets
Fu, W., Li, S., Zhao, Y., Yang, K., Zhang, X., Jin, Y., & Guo, X. (2024) · IEEE Transactions on Circuits and Systems I Regular Papers · doi:10.1109/tcsi.2024.3487486 · Cited by 9 · see citing works
LLMs for Hardware Security: Boon or Bane?
Kande, R., Gohil, V., DeLorenzo, M. C., Chen, C., & Rajendran, J. (2024) · IEEE VLSI Test Symposium (VTS) · doi:10.1109/vts60656.2024.10538871 · Cited by 9 · see citing works
Swaroopa, S., Mukherjee, R., Debnath, A., & Chakraborty, R. S. (2025) · Foundations and Trends® in Electronic Design Automation · doi:10.1561/1000000063-3 · Cited by 9 · see citing works
Navigating SoC Security Landscape on LLM-Guided Paths
Paria, S., Dasgupta, A., & Bhunia, S. (2024) · ACM Great Lakes Symposium on VLSI (GLSVLSI) · doi:10.1145/3649476.3660393 · Cited by 7 · see citing works
Self-citationTowards Automated Verification of IP and COTS: Leveraging LLMs in Pre- and Post-Silicon Stages
Paria, S., Dasgupta, A., & Bhunia, S. (2025) · IEEE VLSI Test Symposium (VTS) · doi:10.1109/vts65138.2025.11022781 · Cited by 7 · see citing works
Self-citationFLAG: F inding L ine A nomalies (in RTL code) with G enerative AI
Ahmad, B., Ah-kiow, J., Tan, B., Karri, R., & Pearce, H. A. (2025) · ACM Transactions on Design Automation of Electronic Systems · doi:10.1145/3736411 · Cited by 6 · see citing works
Large Language Models for SoC Security
Tehranipoor, M. M., Azar, K. Z., Asadizanjani, N., Rahman, F., Kamali, H. M., & Farahmandi, F. (2024) · Springer eBooks · doi:10.1007/978-3-031-58687-3_6 · Cited by 5 · see citing works
LLM-Sec: Closing the Security Loop using LLMs for Hardware Design
Talukdar, J., Banerjee, S., & Firouzi, F. (2025) · IEEE International Conference on Omni-layer Intelligent Systems (COINS) · doi:10.1109/coins65080.2025.11125787 · Cited by 4 · see citing works
Unveiling The Arsenal of User Data Protection Tools and Practices
Moiz, S., Abro, A. A., Ebrahim, M., & Abro, A. B. (2024) · IEEE Karachi Section Humanitarian Technology Conference (KHI-HTC) · doi:10.1109/khi-htc60760.2024.10482280 · Cited by 4 · see citing works
Systematic Testing of Security-Related Vulnerabilities in LLM-Based Applications
Kaplan, H. (2025) · IEEE/ACM International Conference on AI Engineering – Software Engineering for AI (CAIN) · doi:10.1109/cain66642.2025.00043 · Cited by 2 · see citing works
Hayashi, V. T. (2025) · Digital Library of Theses and Dissertations (Universidade de São Paulo) · doi:10.11606/t.3.2025.tde-06052025-090853
CAST: A Compiler-Based Framework for Systematically Testing LLM Compositional Safety
Yan, L., Zhang, Z., Xu, X., An, S., Shen, G., Xuan, Z., Chen, X., & Zhang, X. (2026) · Proceedings of the ACM on software engineering. · doi:10.1145/3832237
Threat Modeling and Property Generation in SoC Security
Hasan, M. A., Ibnat, Z., Tarek, S., Ahmed, B., Ayalasomayajula, A., Das, U., Tehranipoor, M., & Farahmandi, F. (2026) · Springer eBooks · doi:10.1007/978-3-032-34116-7_6
LLM-Driven IP Protection Strategies for SoCs
Kamali, H., & Azar, K. (2026) · Springer eBooks · doi:10.1007/978-3-032-34116-7_7
- Authors
- Paria, S., Dasgupta, A., & Bhunia, S.
- Affiliations
- University of Florida (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2023
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 2308.06932
- OpenAlex
- W4385849010
- Cited by
- 17
- References
- 0
- Citations by year
- 2026: 1 · 2025: 7 · 2024: 9
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Hardware and Architecture › Physical Unclonable Functions (PUFs) and Hardware Security
- Physical Sciences › Computer Science › Hardware and Architecture › Embedded Systems Design Techniques
- Physical Sciences › Computer Science › Artificial Intelligence › Security and Verification in Computing
- Keywords
- system-on-chip security, vulnerability detection, large language models, security policy enforcement, assertion generation, ChatGPT, bards
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
