A survey on hardware security of DNN models and accelerators

S Mittal, H Gupta, S Srivastava - Journal of Systems Architecture, 2021 - Elsevier
As “deep neural networks”(DNNs) achieve increasing accuracy, they are getting employed
in increasingly diverse applications, including security-critical applications such as medical …

Physical side-channel attacks on embedded neural networks: A survey

M Méndez Real, R Salvador - Applied Sciences, 2021 - mdpi.com
During the last decade, Deep Neural Networks (DNN) have progressively been integrated
on all types of platforms, from data centers to embedded systems including low-power …

Leaky nets: Recovering embedded neural network models and inputs through simple power and timing side-channels—Attacks and defenses

S Maji, U Banerjee… - IEEE Internet of Things …, 2021 - ieeexplore.ieee.org
With the recent advancements in machine learning theory, many commercial embedded
microprocessors use neural network (NN) models for a variety of signal processing …

Security of neural networks from hardware perspective: A survey and beyond

Q Xu, MT Arafin, G Qu - Proceedings of the 26th Asia and South Pacific …, 2021 - dl.acm.org
Recent advances in neural networks (NNs) and their applications in deep learning
techniques have made the security aspects of NNs an important and timely topic for …

BoMaNet: Boolean masking of an entire neural network

A Dubey, R Cammarota, A Aysu - Proceedings of the 39th International …, 2020 - dl.acm.org
Recent work on stealing machine learning (ML) models from inference engines with
physical side-channel attacks warrant an urgent need for effective side-channel defenses …

A threshold implementation-based neural network accelerator with power and electromagnetic side-channel countermeasures

S Maji, U Banerjee, SH Fuller… - IEEE Journal of Solid …, 2022 - ieeexplore.ieee.org
With the recent advancements in machine learning (ML) theory, a lot of energy-efficient
neural network (NN) accelerators have been developed. However, their associated side …

Guarding machine learning hardware against physical side-channel attacks

A Dubey, R Cammarota, V Suresh, A Aysu - ACM Journal on Emerging …, 2022 - dl.acm.org
Machine learning (ML) models can be trade secrets due to their development cost. Hence,
they need protection against malicious forms of reverse engineering (eg, in IP piracy). With a …

DNN model architecture fingerprinting attack on CPU-GPU edge devices

K Patwari, SM Hafiz, H Wang… - 2022 IEEE 7th …, 2022 - ieeexplore.ieee.org
Embedded systems for edge computing are getting more powerful, and some are equipped
with a GPU to enable on-device deep neural network (DNN) learning tasks such as image …

Reverse-engineering deep neural networks using floating-point timing side-channels

C Gongye, Y Fei, T Wahl - 2020 57th ACM/IEEE Design …, 2020 - ieeexplore.ieee.org
Trained Deep Neural Network (DNN) models have become valuable intellectual property. A
new attack surface has emerged for DNNs: model reverse engineering. Several recent …

Stealthy inference attack on dnn via cache-based side-channel attacks

H Wang, SM Hafiz, K Patwari, CN Chuah… - … , Automation & Test …, 2022 - ieeexplore.ieee.org
The advancement of deep neural networks (DNNs) motivates the deployment in various
domains, including image classification, disease diagnoses, voice recognition, etc. Since …