Search papers, labs, and topics across Lattice.
This paper addresses the challenge of data scarcity and confidentiality in hardware assurance by introducing a privacy-preserving synthetic data generation pipeline. Utilizing a StyleGAN to create varied hardware layout masks and a Pix2PixHD GAN to translate these masks into realistic scanning electron microscopy (SEM) images, the authors demonstrate that a segmentation model trained solely on synthetic data can achieve superior performance compared to one trained on limited real datasets. The key result underscores that this approach not only enables effective "sim-to-real" transfer but also significantly reduces the risk of exposing proprietary designs to security vulnerabilities.
A segmentation model trained on synthetic data outperforms one trained on real images, all while safeguarding proprietary designs from potential IP breaches.
Hardware assurance relies on scanning electron microscopy (SEM) to verify nanoscale structures, but assembling the large, high-quality datasets required for automated analysis is impeded by time-intensive acquisition and strict intellectual property (IP) constraints on proprietary designs. We propose a privacy-preserving pipeline that secures IP by heavily distorting the functional design while generating a visually realistic synthetic dataset from a small set of initial examples. A StyleGAN first learns the distribution of hardware layout masks to generate novel, macroscopically varied structures. Subsequently, a conditional GAN (Pix2PixHD) translates these masks into realistic SEM images that preserve authentic textures and noise. The primary finding of this work is that a segmentation model trained exclusively on this synthetic data not only demonstrates a successful"sim-to-real"transfer to real images but also outperforms a baseline model trained on the limited real dataset. Because the underlying synthetic layouts are demonstrably novel and reproduce none of the specific proprietary routing of the original design, deploying the final segmentation model mitigates the risk of exposing sensitive IP to attacks like gradient inversion and membership inference, providing a highly secure, high-performance solution for hardware assurance.