Scholarlink

<p>As deep neural networks (DNNs) continue to advance and find widespread applications across various domains, the escalating demands for processing large datasets in artificial intelligence and increasing power density necessitate exploring emerging technologies. In tandem, ensuring the security of DNNs has become paramount amid the growing risks of intellectual property (IP) theft and reverse engineering (RE). In response to these challenges, this paper introduces an efficient approach to safeguarding binary DNNs using spintronic technologies. Our proposed paradigm leverages the read disturbance phenomenon in Magnetic Tunnel Junction (MTJ) devices to fortify DNNs against model replication attacks and reverse engineering attempts. In this innovative approach, during normal DNN operation, weights are read using standard procedures, preserving network accuracy. However, in the event of an intrusion attempt, malicious access to the DNN triggers a high-current read operation, inducing read disturbance. As a result, network accuracy is severely compromised, deterring potential attackers. Extensive simulations substantiate the efficacy of our proposed method in countering model replication attacks in well-established binary DNNs, even under process variations.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

A new method for securing binary deep neural networks against model replication attacks using magnetic tunnel junctions

  • 期刊论文

  • 发表日期：

    2025年1月2日

查看全文
  • Mohammad Hadi Rezayati,
  • Abdolah Amirany,
  • Mohammad Hossein Moaiyeri,
  • Kian Jafari

摘要

As deep neural networks (DNNs) continue to advance and find widespread applications across various domains, the escalating demands for processing large datasets in artificial intelligence and increasing power density necessitate exploring emerging technologies. In tandem, ensuring the security of DNNs has become paramount amid the growing risks of intellectual property (IP) theft and reverse engineering (RE). In response to these challenges, this paper introduces an efficient approach to safeguarding binary DNNs using spintronic technologies. Our proposed paradigm leverages the read disturbance phenomenon in Magnetic Tunnel Junction (MTJ) devices to fortify DNNs against model replication attacks and reverse engineering attempts. In this innovative approach, during normal DNN operation, weights are read using standard procedures, preserving network accuracy. However, in the event of an intrusion attempt, malicious access to the DNN triggers a high-current read operation, inducing read disturbance. As a result, network accuracy is severely compromised, deterring potential attackers. Extensive simulations substantiate the efficacy of our proposed method in countering model replication attacks in well-established binary DNNs, even under process variations.