DNN model theft through trojan side-channel on edge FPGA accelerator

• Main Authors: Chandrasekar, Srivatsan, Lam, Siew-Kei, Thambipillai, Srikanthan
• 其他作者: College of Computing and Data Science
• 格式: Conference or Workshop Item
• 語言: English
• 出版: 2024
• 主題: Computer and Information Science; Side-channel attacks; Deep learning accelerators; FPGA security; Machine learning security; Hardware trojans
• 在線閱讀: https://hdl.handle.net/10356/178536

In this paper, we present a novel hardware trojan assisted side-channel attack to reverse engineer DNN architectures on edge FPGA accelerators. In particular, our attack targets the widely-used Versatile Tensor Accelerator (VTA). A hardware trojan is employed to track the memory transactions by moni...