DNN model theft through trojan side-channel on edge FPGA accelerator

• المؤلفون الرئيسيون: Chandrasekar, Srivatsan, Lam, Siew-Kei, Thambipillai, Srikanthan
• مؤلفون آخرون: College of Computing and Data Science
• التنسيق: Conference or Workshop Item
• اللغة: English
• منشور في: 2024
• الموضوعات: Computer and Information Science; Side-channel attacks; Deep learning accelerators; FPGA security; Machine learning security; Hardware trojans
• الوصول للمادة أونلاين: https://hdl.handle.net/10356/178536

In this paper, we present a novel hardware trojan assisted side-channel attack to reverse engineer DNN architectures on edge FPGA accelerators. In particular, our attack targets the widely-used Versatile Tensor Accelerator (VTA). A hardware trojan is employed to track the memory transactions by moni...