SCA strikes back : reverse engineering neural network architectures using side channels

SCA strikes back : reverse engineering neural network architectures using side channels

Our previous work selected for Top Picks in Hardware and Embedded Security 2020 demonstrates that it is possible to reverse engineer neural networks by using side-channel attacks. We developed a framework that considers each part of the neural network separately and then, by combining the informatio...

Full description

Saved in:
Bibliographic Details
Main Authors: Batina, Lejla, Bhasin, Shivam, Jap, Dirmanto, Picek, Stjepan
Other Authors: Temasek Laboratories @ NTU
Format: Article
Language:English
Published: 2021
Subjects:
Science::Mathematics::Discrete mathematics::Cryptography
Engineering::Computer science and engineering::Computing methodologies::Artificial intelligence
Biological Neural Networks
Neurons
Online Access:https://hdl.handle.net/10356/153411
Tags: Add Tag
No Tags, Be the first to tag this record!
Institution: Nanyang Technological University
Language: English
Description
Summary:Our previous work selected for Top Picks in Hardware and Embedded Security 2020 demonstrates that it is possible to reverse engineer neural networks by using side-channel attacks. We developed a framework that considers each part of the neural network separately and then, by combining the information, manages to reverse engineer all relevant hyper-parameters and parameters. Our work is a proof of concept (but also a realistic demonstration) that such attacks are possible and warns that more effort should be given to developing countermeasures. While we have used microcontrollers for our experiments, the attack applies to other targets like FPGAs and GPUs.

Similar Items