arXiv: RTLGuard: A Lightweight Teacher-Student Defense for Poisoned RTL Code Generation Models

The publication introduces RTLGuard, a defensive framework designed to protect AI models that generate Register Transfer Level (RTL) code, which is used in hardware design, from malicious data poisoning attacks. The paper proposes a lightweight teacher-student architecture that filters out poisoned training data and corrects the model’s output during inference, reducing the risk of backdoor triggers that could compromise chip functionality. This is a technical research contribution, not a regulatory mandate, but it signals a growing concern about supply chain integrity in AI-assisted hardware development.

Organizations most affected are semiconductor companies, fabless design houses, and any firm using large language models or code generation tools for chip design, verification, or intellectual property creation. Also relevant are cloud service providers offering AI-based EDA (electronic design automation) tools, and government contractors handling critical infrastructure or defense electronics. Compliance teams in these sectors should monitor this research as evidence of emerging risks under existing frameworks like the EU AI Act, which classifies high-risk AI systems, and sector-specific rules on hardware security and supply chain due diligence.

Compliance teams should take three immediate actions. First, audit any internal or third-party AI tools used for RTL code generation to determine if they are exposed to untrusted training data. Second, update vendor risk assessments to include questions about data provenance and poisoning defenses for code generation models. Third, begin drafting internal guidance that requires validation of AI-generated hardware code against known-good references, and consider adopting defensive techniques similar to RTLGuard as a best practice, even before regulators mandate them. This is a proactive step to align with the EU’s risk-based approach to AI safety.