LLM-HyPZ: Hardware Vulnerability Discovery Using an LLM-Assisted Hybrid Platform for Zero-Shot Knowledge Extraction and Refinement
Yu-Zheng Lin, Sujan Ghimire, Abhiram Nandimandalam, Jonah Michael Camacho, Unnati Tripathi, Rony Macwan, Sicong Shao, Setareh Rafatirad, Rozhin Yasaei, Pratik Satam, Soheil Salehi
2025 IEEE International Conference on Data Mining Workshops (ICDMW), Washington, DC
LLM-HyPZ combines zero-shot LLM classification, contextualized embeddings, unsupervised clustering, and prompt-driven summarization to mine hardware-related CVEs at scale. On the 2021–2024 CVE corpus (114,836 entries), the framework identified 1,742 hardware-related vulnerabilities and distilled five recurring themes. LLaMA 3.3 70B reached 99.5% classification accuracy on a curated validation set. The pipeline surfaced 411 of 1,026 CVEs later used in MITRE MIHW 2025 analysis.
Contribution. Third author. Graduate Research Assistant in MITHRA Lab; IEEE lists College of Information Science, University of Arizona. Public sources describe contributions in data preprocessing, pipeline organization, RAG-related workflows, and experimental coordination. Exact task split is not itemized in the paper.