Chiplet硬件安全综述:从攻击面分析到测试验证

朱沛霖, 李翔宇

集成电路与嵌入式系统 ›› 2026, Vol. 26 ›› Issue (11) : 1-13.

PDF(6564 KB)
PDF(6564 KB)
集成电路与嵌入式系统 ›› 2026, Vol. 26 ›› Issue (11) : 1-13. DOI: 10.20193/j.ices2097-4191.2026.0088
HIPI ICTS 2026 集成电路测试技术专刊

Chiplet硬件安全综述:从攻击面分析到测试验证

作者信息 +

A review of Chiplet hardware security: from attack-surface analysis to testing and verification

Author information +
文章历史 +

摘要

Chiplet系统由多个独立设计、制造和测试的芯粒集合而成,为后摩尔时代高性能计算提供了重要路径。然而,新型Chiplet场景重构了传统单片系统级芯片(system-on-chip,SoC)的硬件安全边界,并对安全测试提出了新的要求。文中综述Chiplet硬件安全威胁、防御机制与测试验证研究,分析现有SoC安全测试技术在Chiplet场景下的适用性,归纳面向Chiplet场景的新型测试需求,并提出面向组合信任的芯粒生命周期安全测试与验证流程,同时分析测试基础设施可能引入的安全问题,最后总结相关技术的发展方向与关键挑战。

Abstract

Chiplet systems integrate multiple chiplets that are independently designed, manufactured, and tested, providing an important pathway for high-performance computing in the post-Moore era. However, emerging Chiplet-based architectures reshape the hardware security boundaries of conventional monolithic systems-on-chip (SoC) and introduce new requirements for security testing. This paper reviews research on hardware security threats, defense mechanisms, testing, and verification for Chiplet systems. It analyzes the applicability of existing SoC security testing techniques to Chiplet scenarios, summarizes emerging testing requirements, and proposes a Chiplet lifecycle security testing and verification process for compositional trust. The potential security risks introduced by test infrastructures are also examined, followed by a discussion of major research directions and key challenges.

关键词

Chiplet / 硬件安全 / 攻击面分析 / 安全测试与验证 / 可测试性设计

Key words

Chiplet / hardware security / attack-surface analysis / security testing and verification / design for testability

引用本文

导出引用
朱沛霖, 李翔宇. Chiplet硬件安全综述:从攻击面分析到测试验证[J]. 集成电路与嵌入式系统. 2026, 26(11): 1-13 https://doi.org/10.20193/j.ices2097-4191.2026.0088
Zhu Peilin, Li Xiangyu. A review of Chiplet hardware security: from attack-surface analysis to testing and verification[J]. Integrated Circuits and Embedded Systems. 2026, 26(11): 1-13 https://doi.org/10.20193/j.ices2097-4191.2026.0088
中图分类号: TP872 (远距离控制和信号、远距离控制和信号系统)   

参考文献

[1]
Suzano J, Abouzeid F, Di Natale G, et al. On hardware security and trust for chiplet-based 2.5D and 3D ICs: challenges and innovations[J]. IEEE Access, 2024, 12:29778-29794.
[2]
Chhawchharia P, Soni H, Kalyana P, et al. Chiplet-based hardware security and IC traceability:a review of PUFs,die identifiers, and secure packaging techniques[C]// 2026 1st International Electronics & Packaging Technologies Conference:Bridging Skills & Innovation for India’s Industry (EPT India). 2026: 451-456.
[3]
Beyne E, Milojevic D, Van Der Plas G, et al. 3D SoC integration,beyond 2.5D chiplets[C]// 2021 IEEE International Electron Devices Meeting (IEDM). 2021:3.6.1-3.6.4.
[4]
Lau J H. Chiplet design and heterogeneous integration packaging[M]. Singapore:Springer, 2023.
[5]
Kwon Y, Han J, Cho Y C P, et al. Chiplet heterogeneous-integration AI processor[C]// 2023 International Conference on Electronics,Information,and Communication (ICEIC). 2023:1-2.
[6]
Yu D C H, Wang C T, Hsia H. Foundry perspectives on 2.5D/3D integration and roadmap[C]// 2021 IEEE International Electron Devices Meeting (IEDM)). 2021:3.7.1-3.7.4.
[7]
Chacon G A, Williams C, Knechtel J, et al. Hardware Trojan threats to cache coherence in modern 2.5D chiplet systems[J]. IEEE Computer Architecture Letters, 2022, 21(2):133-136.
[8]
Calzada P E, Sami M S U I, Zhou J, et al. HI-SST:safeguarding SiP authenticity through secure split-test in heterogeneous integration[C]// 2024 IEEE Computer Society Annual Symposium on VLSI (ISVLSI). 2024:379-384.
[9]
Wang X R, Feng L, Wang Y J, et al. Resister:a resilient interposer architecture for chiplet to mitigate timing side-channel attacks[J]. ACM Transactions on Design Automation of Electronic Systems, 2025, 30(5):1-23.
[10]
Miketic I, Dhananjay K, Salman E. Covert channel communication as an emerging security threat in 2.5D/3D integrated systems[J]. Sensors, 2023, 23(4):2081.
In this paper, first, a broad overview of existing covert channel communication-based security attacks is provided. Such covert channels establish a communication link between two entities that are not authorized to share data. The secret data is encoded into different forms of signals, such as delay, temperature, or hard drive location. These signals and information are then decoded by the receiver to retrieve the secret data, thereby mitigating some of the existing security measures. The important steps of covert channel attacks are described, such as data encoding, communication protocol, data decoding, and models to estimate communication bandwidth and bit error rate. Countermeasures against covert channels and existing covert channel detection techniques are also summarized. In the second part of the paper, the implications of such attacks for emerging packaging technologies, such as 2.5D/3D integration are discussed. Several covert channel threat models for 2.5D/3D ICs are also proposed.
[11]
Safari Y, Aghanoury P, Iyer S S, et al. Hybrid obfuscation of chiplet-based systems[C]// Proceedings of the 60th ACM/IEEE Design Automation Conference (DAC). 2023:1-6.
[12]
Nabeel M, Ashraf M, Patnaik S, et al. 2.5D root of trust:secure system-level integration of untrusted chiplets[J]. IEEE Transactions on Computers, 2020, 69(11):1611-1625.
[13]
Tashdid I, Farheen T, Rahman S. AuthenTree:a scalable MPC-based distributed trust architecture for chiplet-based heterogeneous systems[C]// 2025 IEEE Physical Assurance and Inspection of Electronics (PAINE). 2025:1-7.
[14]
Lau J H. Chiplet heterogeneous integration[M]// LAU J H. Semiconductor advanced packaging. Singapore: Springer, 2021: 413-439.
[15]
Jeng S P, Liu M. Heterogeneous and chiplet integration using organic interposer (CoWoS-R)[C]// 2022 IEEE International Electron Devices Meeting (IEDM). 2022:3.2.1-3.2.4.
[16]
Sitaraman S, Verhaverbeke S, Banna S, et al. Optimization of 2.5D organic interposer channel for die and chiplets[C]// 2022 IEEE 72nd Electronic Components and Technology Conference (ECTC). 2022: 1316-1322.
[17]
Hsieh K C H. Tutorial: fundamentals of circuit design for 2.5D/3D integration[C]// 2024 IEEE International Solid-State Circuits Conference (ISSCC). 2024.DOI:10.1109/ISSCC49657.2024.11007230.
[18]
Sheikh F, Nagisetty R, Karnik T, et al. 2.5D and 3D heterogeneous integration: emerging applications[J]. IEEE Solid-State Circuits Magazine, 2021, 13(4):77-87.
[19]
Das Sharma D D, Pasdast G, Qian Z, et al. Universal Chiplet Interconnect Express (UCIe): an open industry standard for innovations with chiplets at package level[J]. IEEE Transactions on Components, Packaging and Manufacturing Technology, 2022, 12(9):1423-1431.
[20]
Das Sharma D D. System on a package innovations with Universal Chiplet Interconnect Express (UCIe) interconnect[J]. IEEE Micro, 2023, 43(2):76-85.
[21]
Das Sharma D D, Pasdast G, Tiagaraj S, et al. High-performance, power-efficient three-dimensional system-in-package designs with universal chiplet interconnect express[J]. Nature Electronics, 2024, 7:244-254.
[22]
Pfromm L, Kanani A, Sharma H, et al. MFIT: multi-FIdelity thermal modeling for 2.5D and 3D multi-chiplet architectures[J]. ACM Transactions on Design Automation of Electronic Systems, 2026, 31(1):1-27.
[23]
Zhang Z. A comprehensive study of the hardware Trojan and side-channel attacks in three-dimensional (3D) integrated circuits (ICs)[D]. Durham: University of New Hampshire, 2021.
[24]
Xie Y, Bao C, Serafy C, et al. Security and vulnerability implications of 3D ICs[J]. IEEE Transactions on Multi-Scale Computing Systems, 2016, 2(2):108-122.
[25]
Shayan M, Basu K, Karri R. Security Assessment of Interposer-based Chiplet Integration[J]. 2020.DOI:10.48550/arXiv.2010.13155.
[26]
Tehranipoor M, Koushanfar F. A survey of hardware Trojan taxonomy and detection[J]. IEEE Design & Test of Computers, 2010, 27(1):10-25.
[27]
Chakraborty R S, Narasimhan S, Bhunia S. Hardware Trojan:threats and emerging solutions[C]// 2009 IEEE International High Level Design Validation and Test Workshop (HLDVT). 2009:166-171.
[28]
Deric A, Holcomb D E. Know time to die: integrity checking for zero trust chiplet-based systems using between-die delay PUFs[J]. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2022, 2022(3):391-412.
[29]
Nagata M, Miki T, Miura N. Physical attack protection techniques for IC chip level hardware security[J]. IEEE Transactions on Very Large Scale Integration (VLSI) Systems, 2022, 30(1):5-14.
[30]
Skorobogatov S P. Semi-invasive attacks: a new approach to hardware security analysis[D]. Cambridge: University of Cambridge, 2005.
[31]
Herder C, Yu M D, Koushanfar F, et al. Physical unclonable functions and applications: a tutorial[J]. Proceedings of the IEEE, 2014, 102(8):1126-1141.
[32]
Rührmair U, Sölter J, Sehnke F, et al. PUF modeling attacks on simulated and silicon data[J]. IEEE Transactions on Information Forensics and Security, 2013, 8(11):1876-1891.
[33]
Maiti A, Gunreddy V, Schaumont P. A systematic method to evaluate and compare the performance of physical unclonable functions[M]// Embedded Systems Design with FPGAs. New York,NY: Springer, 2013:245-267.
[34]
Tashdid I, Farheen T, Rahman S.InterPUF:Distributed Authentication via Physically Unclonable Functions and Multi-party Computation for Reconfigurable Interposers[C]// 2026.DOI:10.1109/HOST68814.2026.11604869.
[35]
Sami M S U I, Khan M S M, Farahmandi F, et al. CAKE-SiP: chiplet authenticate & key exchange for secure provisioning in system-in-package[C]// 2024 IEEE Physical Assurance and Inspection of Electronics (PAINE).2024:1-8.
[36]
Sweeney J, Zackriya V M, Pagliarini S, et al. Latch-based logic locking[C]// 2020 IEEE International Symposium on Hardware Oriented Security and Trust (HOST). 2020:132-141.
[37]
Kamali H M, Azar K Z, Farahmandi F, et al. SheLL:shrinking eFPGA fabrics for logic locking[C]// 2023 Design,Automation & Test in Europe Conference & Exhibition (DATE). 2023:1-6.
[38]
Rathor V S, Singh M, Sahoo K S, et al. SubLock: Sub-Circuit Replacement based Input Dependent Key-based Logic Locking for Robust IP Protection[J]. 2024.DOI:10.48550/arXiv.2406.19091.
[39]
Dasgupta A, Paria S, Bhunia S. CIPHR:cryptography inspired IP protection through fine-grain hardware redaction[J]. 2026.https://doi.org/10.48550/arXiv.2604.03560.
[40]
Zhong Y, Guin U. Complexity analysis of the SAT attack on logic locking[J]. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 2023, 42(10):3143-3156.
[41]
Alrahis L, Patnaik S, Shafique M, et al. OMLA:an oracle-less machine learning-based attack on logic locking[J]. IEEE Transactions on Circuits and Systems II:Express Briefs, 2022, 69(3):1602-1606.
[42]
Gandhi J, Shekhawat D, Santosh M, et al. Logic locking for IP security:a comprehensive analysis on challenges,techniques,and trends[J]. Computers & Security, 2023, 129:103196.
[43]
Sisejkovic D, Leupers R. Trustworthy hardware design with logic locking[C]// 2021 IFIP/IEEE 29th International Conference on Very Large Scale Integration (VLSI-SoC). 2021: 1-2.
[44]
Patnaik S, Ashraf M, Sinanoglu O, et al. A modern approach to IP protection and Trojan prevention: split manufacturing for 3D ICs and obfuscation of vertical interconnects[J]. IEEE Transactions on Emerging Topics in Computing, 2021, 9(4):1815-1834.
[45]
Ul Haque M S, Zhou J, Farahmandi F, et al. Leveraging advanced packaging for IP protection in heterogeneous AI hardware[C]// 2025 IEEE 75th Electronic Components and Technology Conference (ECTC). 2025: 1716-1722.
[46]
Halder D. Designing secure interconnects for modern microelectronics:from SoCs to emerging chiplet-based architectures[J]. 2023. arXiv:2307.05815.
[47]
Reimann L M, Rezunov E, Germek D, et al. The impact of logic locking on confidentiality:an automated evaluation[C]// 2025 26th International Symposium on Quality Electronic Design (ISQED). 2025: 1-8.
[48]
Aghanoury P, Ghosh S, Sehatbakhsh N. Security helper chiplets:a new paradigm for secure hardware monitoring[J]. IEEE Computer Architecture Letters, 2025, 24(1):61-64.
[49]
Iyer S S. Heterogeneous integration for performance and scaling[J]. IEEE Transactions on Components, Packaging and Manufacturing Technology, 2016, 6(7):973-982.
[50]
Kamali H M, Azar K Z, Homayoun H, et al. On designing secure and robust scan chain for protecting obfuscated logic[C]// 2020 ACM Great Lakes Symposium on VLSI (GLSVLSI). 2020:217-222.
[51]
Limaye N, Sengupta A, Nabeel M, et al. Is robust design-for-security robust enough Attack on locked circuits with restricted scan chain access[C]// 2019 IEEE/ACM International Conference on Computer-Aided Design (ICCAD). 2019:1-8.
[52]
Chen D, Lin C, Beerel P A. 2021 IEEE International Symposium on Defect and Fault Tolerance in VLSI and Nanotechnology Systems (DFT)[C]// 2021 IEEE International Symposium on Defect and Fault Tolerance in VLSI and Nanotechnology Systems (DFT). 2021:1-6.
[53]
IEEE. IEEE Std 1500-2022: IEEE Standard Testability Method for Embedded Core-based Integrated Circuits[S]. New York: IEEE, 2022.
[54]
IEEE. IEEE Std 1687-2014:IEEE Standard for Access and Control of Instrumentation Embedded within a Semiconductor Device[S]. New York: IEEE, 2014.
[55]
IEEE. IEEE Std 1838-2019:IEEE Standard for Test Access Architecture for Three-Dimensional Stacked Integrated Circuits[S]. New York: IEEE, 2020.
[56]
Universal Chiplet Interconnect Express Inc. UCIe Specification 2.0[EB/OL].[2026-09-06]. https://www.uciexpress.org/specifications.
[57]
Gubbi K I, Latibari B S, Srikanth A, et al. Hardware Trojan detection using machine learning: a tutorial[J]. ACM Transactions on Embedded Computing Systems, 2023, 22(3):1-26.
[58]
Jain A, Zhou Z, Guin U. Survey of recent developments for hardware Trojan detection[C]// 2021 IEEE International Symposium on Circuits and Systems (ISCAS). 2021:1-5.
[59]
Cruz J, Hamlet J. A survey on the design,detection, and prevention of pre-silicon hardware Trojans[J]. IEEE Access, 2025, 13:58509-58547.
[60]
Yasaei R, Chen L, Yu S Y, et al. Hardware Trojan detection using graph neural networks[J]. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 2025, 44(1):25-38.
[61]
Vishwakarma R, Rezaei A. Uncertainty-aware hardware Trojan detection using multimodal deep learning[C]// 2024 Design, Automation & Test in Europe Conference & Exhibition (DATE). 2024:1-6.
[62]
Sarihi A, Jamieson P, Patooghy A, et al. Multi-criteria hardware Trojan detection: a reinforcement learning approach[C]// 2023 IEEE 66th International Midwest Symposium on Circuits and Systems (MWSCAS). 2023: 1093-1097.
[63]
Sarihi A, Patooghy A, Jamieson P, et al. Trojan playground: a reinforcement learning framework for hardware Trojan insertion and detection[J]. The Journal of Supercomputing, 2024, 80(10):14295-14329.
[64]
Hasegawa K, Yamashita K, Hidano S, et al. Node-wise hardware Trojan detection based on graph learning[J]. IEEE Transactions on Computers, 2025, 74(3):749-761.
[65]
Whitten P, Wolff F, Papachristou C. An AI architecture with the capability to classify and explain hardware Trojans[C]// NAECON 2024-IEEE National Aerospace and Electronics Conference. 2024:349-354.
[66]
Hassan R, Meng X, Basu K, et al. Circuit topology-aware vaccination-based hardware Trojan detection[J]. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 2023, 42(9):2852-2862.
[67]
Hasegawa K, Hidano S, Nozawa K, et al. R-HTDetector: robust hardware-Trojan detection based on adversarial training[J]. IEEE Transactions on Computers, 2023, 72(2):333-345.
[68]
Meza A, Restuccia F, Oberg J, et al. Security verification of the OpenTitan hardware root of trust[J]. IEEE Security & Privacy, 2023, 21(3):27-36.
[69]
Alatoun K M, Achyutha S M, Vemuri R. Efficient methods for SoC trust validation using information flow verification[C]// 2021 IEEE 39th International Conference on Computer Design (ICCD). 2021: 608-616.
[70]
Ardeshiricham A, Hu W, Marxen J, et al. Register transfer level information flow tracking for provably secure hardware design[C]// 2017 Design, Automation & Test in Europe Conference & Exhibition (DATE). 2017:1691-1696.
[71]
Guo X, Dutta R G, Jin Y, et al. Pre-silicon security verification and validation:a formal perspective[C]// Proceedings of the 52nd Annual Design Automation Conference (DAC). 2015:1-6.
[72]
Rahman T, Saha S, Alhurubi a Y, et al. Emulation-based system-on-chip security verification:challenges and opportunities[J]. 2026.https://doi.org/10.48550/arXiv.2604.15073.
[73]
Vakil A, Behnia F, Mirzaeian A, et al. LASCA:learning assisted side channel delay analysis for hardware Trojan detection[C]// 2020 21st International Symposium on Quality Electronic Design (ISQED). 2020: 40-45.
[74]
Pearce H, Surabhi V R, Krishnamurthy P, et al. Detecting hardware Trojans in PCBs using side channel loopbacks[J]. IEEE Transactions on Very Large Scale Integration (VLSI) Systems, 2022, 30(7):926-937.
[75]
Lenz J N, Perryman S K, Martynowych D J, et al. Hardware Trojan detection potential and limits with the quantum diamond microscope[J]. ACM Journal on Emerging Technologies in Computing Systems, 2025, 21(1):1-24.
[76]
Haidar G I, Zhou J, Sami M S U I, et al. SAFET-HI:Secure Authentication-Based Framework for Encrypted Testing in Heterogeneous Integration[J]. IEEE Journal on Emerging and Selected Topics in Circuits and Systems, 2025, 15(3):478-492.

责任编辑: 薛士然
PDF(6564 KB)

Accesses

Citation

Detail

段落导航
相关文章

/

〈 〉