{"id":"https://openalex.org/W7204458528","doi":"https://doi.org/10.48550/arxiv.2608.26049","title":"RTLGuard: A Lightweight Teacher-Student Defense for Poisoned RTL Code Generation Models","display_name":"RTLGuard: A Lightweight Teacher-Student Defense for Poisoned RTL Code Generation Models","publication_year":2026,"publication_date":"2026-08-26","ids":{"openalex":"https://openalex.org/W7204458528","doi":"https://doi.org/10.48550/arxiv.2608.26049"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2608.26049","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.26049","pdf_url":"https://arxiv.org/pdf/2608.26049","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2608.26049","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116054010","display_name":"Mahshid Rezakhani","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I106165777","display_name":"University of Central Florida","ror":"https://ror.org/036nfer12","country_code":"US","type":"education","lineage":["https://openalex.org/I106165777"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rezakhani, Mahshid","raw_affiliation_strings":["Department of Electrical and Computer Engineering (ECE) , University of Central Florida , Orlando , FL , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering (ECE) , University of Central Florida , Orlando , FL , USA","institution_ids":["https://openalex.org/I106165777"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031747364","display_name":"Kimia Zamiri Azar","orcid":"https://orcid.org/0000-0001-5684-100X","observed_orcids":["https://orcid.org/0000-0001-5684-100X"]},"institutions":[{"id":"https://openalex.org/I106165777","display_name":"University of Central Florida","ror":"https://ror.org/036nfer12","country_code":"US","type":"education","lineage":["https://openalex.org/I106165777"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Azar, Kimia","raw_affiliation_strings":["Department of Electrical and Computer Engineering (ECE) , University of Central Florida , Orlando , FL , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering (ECE) , University of Central Florida , Orlando , FL , USA","institution_ids":["https://openalex.org/I106165777"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020619624","display_name":"Hadi Mardani Kamali","orcid":"https://orcid.org/0000-0002-5917-5425","observed_orcids":["https://orcid.org/0000-0002-5917-5425","https://orcid.org/0000-0003-3619-2465"]},"institutions":[{"id":"https://openalex.org/I106165777","display_name":"University of Central Florida","ror":"https://ror.org/036nfer12","country_code":"US","type":"education","lineage":["https://openalex.org/I106165777"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kamali, Hadi","raw_affiliation_strings":["Department of Electrical and Computer Engineering (ECE) , University of Central Florida , Orlando , FL , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering (ECE) , University of Central Florida , Orlando , FL , USA","institution_ids":["https://openalex.org/I106165777"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I106165777"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.6079000234603882,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.6079000234603882,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.37209999561309814,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.012000000104308128,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/rtl-code-generation","display_name":"RTL code generation","score":0.8999999761581421},{"id":"https://openalex.org/keywords/teacher-student-models","display_name":"teacher-student models","score":0.6759999990463257},{"id":"https://openalex.org/keywords/backdoor-attacks","display_name":"backdoor attacks","score":0.625},{"id":"https://openalex.org/keywords/hardware-trojans","display_name":"hardware Trojans","score":0.8330000042915344},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.5989999771118164},{"id":"https://openalex.org/keywords/knowledge-distillation","display_name":"knowledge distillation","score":0.6990000009536743},{"id":"https://openalex.org/keywords/feature-alignment","display_name":"feature alignment","score":0.9710000157356262},{"id":"https://openalex.org/keywords/hardware-security","display_name":"hardware security","score":0.578000009059906},{"id":"https://openalex.org/keywords/hardware-synthesis","display_name":"hardware synthesis","score":0.3310000002384186}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.782800018787384},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.766700029373169},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.7523000240325928},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.571399986743927},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4867999851703644},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4661000072956085},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.4641000032424927},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4433000087738037},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.44119998812675476},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4361000061035156},{"id":"https://openalex.org/C145644426","wikidata":"https://www.wikidata.org/wiki/Q169411","display_name":"Unified Modeling Language","level":3,"score":0.3517000079154968},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.34389999508857727},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.33410000801086426},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.322299987077713},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3190000057220459},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3046000003814697},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.2825999855995178},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2736000120639801},{"id":"https://openalex.org/C58013763","wikidata":"https://www.wikidata.org/wiki/Q5754574","display_name":"High-level synthesis","level":3,"score":0.2628999948501587},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.2574000060558319},{"id":"https://openalex.org/C195672273","wikidata":"https://www.wikidata.org/wiki/Q6888132","display_name":"Model-based design","level":2,"score":0.2554999887943268}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2608.26049","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.26049","pdf_url":"https://arxiv.org/pdf/2608.26049","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.26049","doi":"https://doi.org/10.48550/arxiv.2608.26049","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.26049","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2608.26049","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.26049","pdf_url":"https://arxiv.org/pdf/2608.26049","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204458528.pdf","grobid_xml":"https://content.openalex.org/works/W7204458528.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7159613364","https://openalex.org/W4415003296","https://openalex.org/W7163688398","https://openalex.org/W6929258220","https://openalex.org/W4410583315","https://openalex.org/W7117561769","https://openalex.org/W7125194385","https://openalex.org/W4402345724","https://openalex.org/W4416454670","https://openalex.org/W4403709585"],"abstract_inverted_index":{"The":[0],"rapid":[1],"advancement":[2],"of":[3,49,109,136,186],"large":[4],"language":[5],"models":[6,36,51,123],"(LLMs)":[7],"is":[8],"driving":[9],"a":[10,96,114,127,133,147],"shift":[11],"toward":[12],"automated":[13],"register":[14],"transfer":[15],"level":[16],"(RTL)":[17],"code":[18],"generation,":[19],"enabling":[20],"designers":[21],"to":[22,73,93,118,159],"translate":[23],"high-level":[24],"specs.":[25],"into":[26],"synthesizable":[27],"hardware.":[28],"However,":[29],"this":[30,88],"reliance":[31],"on":[32,132],"pre-trained":[33],"(3rd-party)":[34],"fine-tuned":[35],"may":[37,60],"introduce":[38,91],"critical":[39],"trust":[40,97],"issues,":[41],"as":[42],"the":[43,142,174,181,187],"training":[44],"data":[45],"and":[46,151,156,184],"adaptation":[47],"process":[48],"these":[50],"are":[52],"often":[53],"opaque.":[54],"Thus,":[55],"adversaries":[56],"(even":[57],"model":[58,131,145],"providers)":[59],"embed":[61],"hidden":[62],"backdoor":[63],"threats":[64],"during":[65],"fine-tuning,":[66],"allowing":[67],"malicious":[68,161],"behavior,":[69],"e.g.,":[70],"hardware":[71],"Trojans,":[72],"be":[74],"triggered":[75],"by":[76,81,124],"seemingly":[77],"benign":[78],"prompts":[79],"given":[80],"victim":[82],"user":[83],"at":[84],"inference":[85],"time.":[86],"In":[87],"paper,":[89],"we":[90],"RTLGuard,":[92],"mitigate":[94],"such":[95],"issue":[98],"in":[99],"AI-enabled":[100],"IC":[101],"supply":[102],"chain.":[103],"Rather":[104],"than":[105],"prohibitive":[106],"computational":[107],"cost":[108],"full-parameter":[110],"retraining,":[111],"RTLGuard":[112,171],"leverages":[113],"teacher-student":[115,149],"framework":[116],"designed":[117],"sanitize":[119],"compromised":[120],"RTL":[121,138,189],"generation":[122],"(1)":[125],"fine-tuning":[126],"small-scale,":[128],"\"clean\"":[129],"teacher":[130],"limited":[134],"set":[135],"trusted":[137],"data,":[139],"(2)":[140],"guiding":[141],"poisoned":[143],"target":[144],"via":[146],"composite":[148],"objective,":[150],"(3)":[152],"incorporating":[153],"feature":[154],"alignment":[155],"knowledge":[157],"distillation":[158],"suppress":[160],"behaviors.":[162],"Our":[163],"experiments":[164],"across":[165],"various":[166],"LLM":[167],"architectures":[168],"demonstrate":[169],"that":[170],"significantly":[172],"reduces":[173],"Attack":[175],"Success":[176],"Rate":[177],"(ASR)":[178],"while":[179],"preserving":[180],"functional":[182],"correctness":[183],"synthesizability":[185],"generated":[188],"code.":[190]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-08-28T00:00:00"}