- Hardware Trojans threaten the global chip industry from deep within supply chains
- Even 97% accuracy leaves room for devastating vulnerabilities in production chips
- Detecting hidden threats before deployment remains a critical technical challenge
AI is increasingly being used to detect hidden threats in computer chips, with researchers at the University of Missouri claiming their new method achieves a 97% success rate in identifying hardware Trojans.
These malicious changes are inserted during chip manufacturing and can compromise devices used in data centers, medical equipment or even defense systems.
The team’s work represents an important step in applying AI tools to secure the hardware that underpins much of the digital economy.
The persistent challenge of hardware Trojans
Modern computer chips are produced through an extensive global supply chain, where design, testing and assembly are often handled by several companies in different countries.
This complexity creates opportunities for Trojans to be inserted at almost any stage of production, making them extremely difficult to detect.
Once embedded, they can remain dormant until activated, leading to data theft or device failure.
Detecting and removing these threats is expensive and, in severe cases, can force companies to recall entire product lines, damaging both finances and reputation.
To address these challenges, University of Missouri researchers introduced PEARL, a system that uses large language models (LLMs) such as GPT-3.5 Turbo, Gemini 1.5 Pro, Llama 3.1, and DeepSeek-V2 for hardware Trojan detection.
PEARL uses in-context learning techniques, including zero-shot, one-shot, and few-shot strategies, to identify Trojans in Verilog code without training from scratch.
It also provides human-readable explanations describing why a section of code was classified as malicious, thereby improving transparency.
Combining open source and enterprise LLMs, the researchers tested the model’s adaptability and interpretability across various chip benchmarks, including the Trust-Hub and ISCAS 85/89 datasets.
Experimental results show that enterprise LLMs such as GPT-3.5 Turbo achieved up to 97% accuracy in detecting unknown hardware Trojans, while open source models such as DeepSeek-V2 reached around 91%.
In addition, PEARL works without the need for a “golden model”, which is typically a pure reference chip used for comparison, enabling wider practical application.
Despite its promising results, a detection rate of 97% still leaves a small but meaningful margin for undetected Trojans.
Given that chips underpin critical digital systems, from financial networks to national defense operations, even minor vulnerabilities can have far-reaching effects.
In high-stakes industries, a single missed threat can result in catastrophic failure – so experts remain cautious about solely relying on AI-powered models without additional layers of manual verification and testing.
The authors acknowledge that perfect detection is still unattainable, especially given the sophistication of new Trojans.
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews and opinions in your feeds. Be sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, video unboxings, and get regular updates from us on WhatsApp also.
