Security Verification in Practice Lessons from Pre-Silicon Analysis of SoC Subsystems