DNN model theft through trojan side-channel on edge FPGA accelerator

• Main Authors: Chandrasekar, Srivatsan, Lam, Siew-Kei, Thambipillai, Srikanthan
• Other Authors: College of Computing and Data Science
• Format: Conference or Workshop Item
• Language: English
• Published: 2024
• Subjects: Computer and Information Science; Side-channel attacks; Deep learning accelerators; FPGA security; Machine learning security; Hardware trojans
• Online Access: https://hdl.handle.net/10356/178536
• Institution: Nanyang Technological University

In this paper, we present a novel hardware trojan assisted side-channel attack to reverse engineer DNN architectures on edge FPGA accelerators. In particular, our attack targets the widely-used Versatile Tensor Accelerator (VTA). A hardware trojan is employed to track the memory transactions by moni...