{"id":"https://openalex.org/W4410919938","doi":"https://doi.org/10.1145/3737459","title":"HWREx: AI-enabled Hardware Weakness and Risk Exploration and Storytelling Framework with LLM-assisted Mitigation Suggestion","display_name":"HWREx: AI-enabled Hardware Weakness and Risk Exploration and Storytelling Framework with LLM-assisted Mitigation Suggestion","publication_year":2025,"publication_date":"2025-05-31","ids":{"openalex":"https://openalex.org/W4410919938","doi":"https://doi.org/10.1145/3737459"},"language":"en","primary_location":{"id":"doi:10.1145/3737459","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3737459","pdf_url":null,"source":{"id":"https://openalex.org/S105046310","display_name":"ACM Transactions on Design Automation of Electronic Systems","issn_l":"1084-4309","issn":["1084-4309","1557-7309"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Design Automation of Electronic Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3737459","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5098749111","display_name":"Sujan Ghimire","orcid":"https://orcid.org/0009-0009-1331-0706"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sujan Ghimire","raw_affiliation_strings":["The University of Arizona","The University of Arizona, Tucson, United States"],"raw_orcid":"https://orcid.org/0009-0009-1331-0706","affiliations":[{"raw_affiliation_string":"The University of Arizona","institution_ids":["https://openalex.org/I138006243"]},{"raw_affiliation_string":"The University of Arizona, Tucson, United States","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102105101","display_name":"Yu-Zheng Lin","orcid":"https://orcid.org/0000-0001-7975-3694"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yu-Zheng Lin","raw_affiliation_strings":["The University of Arizona","The University of Arizona, Tucson, United States"],"raw_orcid":"https://orcid.org/0000-0001-7975-3694","affiliations":[{"raw_affiliation_string":"The University of Arizona","institution_ids":["https://openalex.org/I138006243"]},{"raw_affiliation_string":"The University of Arizona, Tucson, United States","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091542573","display_name":"Muntasir Mamun","orcid":"https://orcid.org/0000-0001-9802-2627"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Muntasir Mamun","raw_affiliation_strings":["The University of Arizona","The University of Arizona, Tucson, United States"],"raw_orcid":"https://orcid.org/0000-0001-9802-2627","affiliations":[{"raw_affiliation_string":"The University of Arizona","institution_ids":["https://openalex.org/I138006243"]},{"raw_affiliation_string":"The University of Arizona, Tucson, United States","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078860427","display_name":"Muhtasim Alam Chowdhury","orcid":"https://orcid.org/0009-0008-2160-5689"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Muhtasim Alam Chowdhury","raw_affiliation_strings":["The University of Arizona","The University of Arizona, Tucson, United States"],"raw_orcid":"https://orcid.org/0009-0008-2160-5689","affiliations":[{"raw_affiliation_string":"The University of Arizona","institution_ids":["https://openalex.org/I138006243"]},{"raw_affiliation_string":"The University of Arizona, Tucson, United States","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5117784145","display_name":"Farhad Alemi","orcid":"https://orcid.org/0000-0003-2501-9886"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Farhad Alemi","raw_affiliation_strings":["University of California Davis","University of California Davis, Davis, United States"],"raw_orcid":"https://orcid.org/0000-0003-2501-9886","affiliations":[{"raw_affiliation_string":"University of California Davis","institution_ids":["https://openalex.org/I84218800"]},{"raw_affiliation_string":"University of California Davis, Davis, United States","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009789022","display_name":"Shuyu Cai","orcid":null},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shuyu Cai","raw_affiliation_strings":["University of California Davis","University of California Davis, Davis, United States"],"raw_orcid":"https://orcid.org/0009-0006-2701-2695","affiliations":[{"raw_affiliation_string":"University of California Davis","institution_ids":["https://openalex.org/I84218800"]},{"raw_affiliation_string":"University of California Davis, Davis, United States","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jinduo Guo","orcid":"https://orcid.org/0009-0001-3513-0863"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jinduo Guo","raw_affiliation_strings":["University of California Davis","University of California Davis, Davis, United States"],"raw_orcid":"https://orcid.org/0009-0001-3513-0863","affiliations":[{"raw_affiliation_string":"University of California Davis","institution_ids":["https://openalex.org/I84218800"]},{"raw_affiliation_string":"University of California Davis, Davis, United States","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Mingyu Zhu","orcid":"https://orcid.org/0009-0008-3416-6937"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mingyu Zhu","raw_affiliation_strings":["University of California Davis","University of California Davis, Davis, United States"],"raw_orcid":"https://orcid.org/0009-0008-3416-6937","affiliations":[{"raw_affiliation_string":"University of California Davis","institution_ids":["https://openalex.org/I84218800"]},{"raw_affiliation_string":"University of California Davis, Davis, United States","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Honghui Li","orcid":"https://orcid.org/0009-0004-8473-9917"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Honghui Li","raw_affiliation_strings":["University of California Davis","University of California Davis, Davis, United States"],"raw_orcid":"https://orcid.org/0009-0004-8473-9917","affiliations":[{"raw_affiliation_string":"University of California Davis","institution_ids":["https://openalex.org/I84218800"]},{"raw_affiliation_string":"University of California Davis, Davis, United States","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038401622","display_name":"Banafsheh Saber Latibari","orcid":"https://orcid.org/0000-0003-3735-9191"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Banafsheh Saber Latibari","raw_affiliation_strings":["Electrical and Computer Engineering, The University of Arizona","Electrical and Computer Engineering, The University of Arizona, Tucson, United States"],"raw_orcid":"https://orcid.org/0000-0003-3735-9191","affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering, The University of Arizona","institution_ids":["https://openalex.org/I138006243"]},{"raw_affiliation_string":"Electrical and Computer Engineering, The University of Arizona, Tucson, United States","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103033046","display_name":"Setareh Rafatirad","orcid":"https://orcid.org/0000-0003-2035-8512"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Setareh Rafatirad","raw_affiliation_strings":["University of California Davis","University of California Davis, Davis, United States"],"raw_orcid":"https://orcid.org/0000-0003-2035-8512","affiliations":[{"raw_affiliation_string":"University of California Davis","institution_ids":["https://openalex.org/I84218800"]},{"raw_affiliation_string":"University of California Davis, Davis, United States","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028622409","display_name":"Pratik Satam","orcid":"https://orcid.org/0000-0003-3139-8333"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pratik Satam","raw_affiliation_strings":["The University of Arizona","The University of Arizona, Tucson, United States"],"raw_orcid":"https://orcid.org/0000-0003-3139-8333","affiliations":[{"raw_affiliation_string":"The University of Arizona","institution_ids":["https://openalex.org/I138006243"]},{"raw_affiliation_string":"The University of Arizona, Tucson, United States","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016438213","display_name":"Soheil Salehi","orcid":"https://orcid.org/0000-0001-5998-8795"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Soheil Salehi","raw_affiliation_strings":["Electrical and Computer Engineering, The University of Arizona","Electrical and Computer Engineering, The University of Arizona, Tucson, United States"],"raw_orcid":"https://orcid.org/0000-0001-5998-8795","affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering, The University of Arizona","institution_ids":["https://openalex.org/I138006243"]},{"raw_affiliation_string":"Electrical and Computer Engineering, The University of Arizona, Tucson, United States","institution_ids":["https://openalex.org/I138006243"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":13,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":10.1274,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.97800576,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"30","issue":"6","first_page":"1","last_page":"33"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8514699935913086},{"id":"https://openalex.org/keywords/storytelling","display_name":"Storytelling","score":0.7089941501617432},{"id":"https://openalex.org/keywords/weakness","display_name":"Weakness","score":0.5363060235977173},{"id":"https://openalex.org/keywords/computer-architecture","display_name":"Computer architecture","score":0.44114747643470764},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.371459424495697},{"id":"https://openalex.org/keywords/narrative","display_name":"Narrative","score":0.11853376030921936},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.08191066980361938}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8514699935913086},{"id":"https://openalex.org/C2776538412","wikidata":"https://www.wikidata.org/wiki/Q989963","display_name":"Storytelling","level":3,"score":0.7089941501617432},{"id":"https://openalex.org/C2780247198","wikidata":"https://www.wikidata.org/wiki/Q633403","display_name":"Weakness","level":2,"score":0.5363060235977173},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.44114747643470764},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.371459424495697},{"id":"https://openalex.org/C199033989","wikidata":"https://www.wikidata.org/wiki/Q1318295","display_name":"Narrative","level":2,"score":0.11853376030921936},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.08191066980361938},{"id":"https://openalex.org/C105702510","wikidata":"https://www.wikidata.org/wiki/Q514","display_name":"Anatomy","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3737459","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3737459","pdf_url":null,"source":{"id":"https://openalex.org/S105046310","display_name":"ACM Transactions on Design Automation of Electronic Systems","issn_l":"1084-4309","issn":["1084-4309","1557-7309"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Design Automation of Electronic Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3737459","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3737459","pdf_url":null,"source":{"id":"https://openalex.org/S105046310","display_name":"ACM Transactions on Design Automation of Electronic Systems","issn_l":"1084-4309","issn":["1084-4309","1557-7309"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Design Automation of Electronic Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W1934458198","https://openalex.org/W2004228899","https://openalex.org/W2157116240","https://openalex.org/W2289443514","https://openalex.org/W2322411027","https://openalex.org/W2766026515","https://openalex.org/W2768417459","https://openalex.org/W2785446263","https://openalex.org/W2963447020","https://openalex.org/W3036557299","https://openalex.org/W3175406676","https://openalex.org/W3187025053","https://openalex.org/W3195850962","https://openalex.org/W3199212845","https://openalex.org/W3213015148","https://openalex.org/W3214263053","https://openalex.org/W4226349076","https://openalex.org/W4313639502","https://openalex.org/W4318389352","https://openalex.org/W4353056549","https://openalex.org/W4366368023","https://openalex.org/W4385187279","https://openalex.org/W4385671288","https://openalex.org/W4386119501"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2884441370","https://openalex.org/W1536421369","https://openalex.org/W2086118318","https://openalex.org/W2082193010","https://openalex.org/W4319988281","https://openalex.org/W2993120730","https://openalex.org/W1765898938"],"abstract_inverted_index":{"The":[0],"growing":[1],"complexity":[2],"of":[3,29,142],"modern":[4],"computing":[5],"frameworks":[6],"has":[7],"led":[8],"to":[9,16,91,109,167,182],"an":[10,101],"increase":[11],"in":[12],"cybersecurity":[13],"vulnerabilities":[14,94],"reported":[15],"the":[17,55,75,124],"National":[18],"Vulnerability":[19,61],"Database":[20],"(NVD).":[21],"Extracting":[22],"meaningful":[23],"trends":[24],"from":[25,54],"this":[26],"vast":[27],"amount":[28],"unstructured":[30],"data":[31],"is":[32],"challenging":[33],"without":[34],"proper":[35],"tools":[36],"and":[37,48,50,64,69,79,82,95,113,130,149,164,171],"methodologies.":[38],"Existing":[39],"approaches":[40],"lack":[41],"a":[42],"holistic":[43],"strategy":[44],"for":[45,144,147,151,159],"vulnerability":[46,111],"mitigation":[47,119,173,185],"prediction":[49],"effective":[51],"knowledge":[52,135],"extraction":[53],"Common":[56,60,65],"Weakness":[57,78],"Enumeration":[58,68],"(CWE),":[59],"Exposure":[62],"(CVE),":[63],"Attack":[66],"Pattern":[67],"Classification":[70],"(CAPEC)":[71],"databases.":[72],"We":[73],"introduce":[74],"AI-enabled":[76],"Hardware":[77],"Risk":[80],"Exploration":[81],"Storytelling":[83,103],"Framework":[84],"with":[85],"LLM-assisted":[86],"Mitigation":[87],"Suggestion":[88],"(HWREx),":[89],"designed":[90],"address":[92],"hardware":[93,161],"IoT":[96],"security.":[97],"Our":[98,137],"architecture":[99],"features":[100],"Ontology-driven":[102],"capability":[104],"that":[105],"automates":[106],"ontology":[107],"updates":[108],"track":[110],"patterns":[112],"evolution":[114],"over":[115],"time,":[116],"while":[117],"offering":[118],"strategies.":[120,174],"It":[121],"also":[122],"clarifies":[123],"complex":[125],"interrelations":[126],"among":[127],"CVEs,":[128],"CWEs,":[129],"CAPECs":[131],"through":[132],"interactive":[133],"visual":[134],"graphs.":[136],"framework":[138],"achieved":[139],"accuracy":[140],"rates":[141],"62%":[143],"CWE-CWE,":[145],"83%":[146],"CWE-CVE,":[148],"77%":[150],"CWE-CAPEC":[152],"linkage":[153],"predictions.":[154],"These":[155],"graphs":[156],"are":[157],"instrumental":[158],"in-depth":[160],"weakness":[162],"analysis":[163],"enable":[165],"HWREx":[166,176],"deliver":[168],"comprehensive":[169],"assessments":[170],"actionable":[172],"Additionally,":[175],"utilizes":[177],"Generative":[178],"Pre-trained":[179],"Transformers":[180],"(GPT)":[181],"offer":[183],"tailored":[184],"suggestions.":[186]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":3}],"updated_date":"2026-06-19T17:40:00.097472","created_date":"2025-06-01T00:00:00"}