AI 中文总结
本文基于硬件黑客竞赛开展SoC安全验证系统研究，提出多策略漏洞分析方法，结合多种技术分析漏洞，推导验证启示，探讨竞赛基准对硬件安全技术评估及EDA研究的支持作用。
AI 中文摘要
硬件黑客竞赛已成为评估复杂片上系统（SoC）设计安全漏洞、推动安全意识验证及工具开发的实用平台。本文通过公开盒式硬件黑客竞赛对SoC安全验证展开系统研究，重点关注实用漏洞分析策略、观测到的发现及对安全意识验证的启示。本文提出多策略漏洞分析方法，结合基于仿真的验证、形式化验证、 lint 分析、大语言模型（LLM）辅助漏洞检测及覆盖率引导混合模糊测试。分析代表性漏洞发现，说明不同技术如何暴露互补类别的安全缺陷，并推导前硅安全验证的实用启示。最后，本文探讨竞赛基准如何支持新兴硬件安全技术的可复现评估，并指导未来安全意识电子设计自动化（EDA）研究。
英文摘要
Hardware hacking competitions have emerged as practical platforms for evaluating security weaknesses in complex System-on-Chip (SoC) designs while promoting security-aware verification and tool development. This paper presents a systematic study of SoC security verification through open-box hardware hacking competitions, focusing on practical vulnerability analysis strategies, observed findings, and lessons for security-aware verification. We present a multi-strategy vulnerability analysis methodology, combining simulation-based verification, formal verification, lint analysis, Large Language Model (LLM)-assisted bug detection, and coverage-guided hybrid fuzzing. Representative vulnerability findings are analyzed to illustrate how different techniques expose complementary classes of security flaws, and we derive practical lessons for pre-silicon security verification. Finally, we discuss how competition benchmarks can support the reproducible evaluation of emerging hardware security techniques and guide future security-aware EDA research.
Comments11 pages, 5 figures, 9 tables
