Search papers, labs, and topics across Lattice.
The paper introduces ATLAS, a framework leveraging LLMs to automate the generation of assertion-based security properties from vulnerability knowledge bases (CWE) for SoC security verification. ATLAS maps weaknesses to SoC-specific assets and generates JasperGold scripts, effectively bridging threat modeling and formal verification. Evaluated on HACK@DAC benchmarks, ATLAS detected 39/48 CWEs and generated correct properties for 33, demonstrating its potential for automated SoC security verification.
Automating the creation of formal security properties from known vulnerabilities slashes the manual effort required for SoC security verification.
This work presents ATLAS, an LLM-driven framework that bridges standardized threat modeling and property-based formal verification for System-on-Chip (SoC) security. Starting from vulnerability knowledge bases such as Common Weakness Enumeration (CWE), ATLAS identifies SoC-specific assets, maps relevant weaknesses, and generates assertion-based security properties and JasperGold scripts for verification. By combining asset-centric analysis with standardized threat model templates and multi-source SoC context, ATLAS automates the transformation from vulnerability reasoning to formal proof. Evaluated on three HACK@DAC benchmarks, ATLAS detected 39/48 CWEs and generated correct properties for 33 of those bugs, advancing automated, knowledge-driven SoC security verification toward a secure-by-design paradigm.
