DNN model theft through trojan side-channel on edge FPGA accelerator

DNN model theft through trojan side-channel on edge FPGA accelerator

In this paper, we present a novel hardware trojan assisted side-channel attack to reverse engineer DNN architectures on edge FPGA accelerators. In particular, our attack targets the widely-used Versatile Tensor Accelerator (VTA). A hardware trojan is employed to track the memory transactions by moni...

Full description

Bibliographic Details
Main Authors: Chandrasekar, Srivatsan, Lam, Siew-Kei, Thambipillai, Srikanthan
Other Authors: College of Computing and Data Science
Format: Conference Paper
Language:English
Published: 2024
Subjects:
Computer and Information Science
Side-channel attacks
Deep learning accelerators
FPGA security
Machine learning security
Hardware trojans
Online Access:https://hdl.handle.net/10356/178536

Similar Items

Similar Items