SNIFF: Reverse Engineering of Neural Networks With Fault Attacks

نویسندگان

چکیده

Neural networks have been shown to be vulnerable against fault injection attacks. These attacks change the physical behavior of device during computation, resulting in a value that is currently being computed. They can realized by various techniques, ranging from clock/voltage glitching application lasers rowhammer. Previous works mostly explored for output misclassification, thus affecting reliability neural networks. In this article, we investigate possibility reverse engineer with Sign bit flip attack enables engineering changing sign intermediate values. We develop first exact extraction method on deep-layer feature extractor provably allows recovery proprietary model parameters. Our experiments Keras library show precision error parameter tested less than $10^{-13}$ usage 64-bit floats, which improves current state art six orders magnitude.

برای دانلود باید عضویت طلایی داشته باشید

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Towards Reverse-Engineering Black-Box Neural Networks

Many deployed learned models are black boxes: given input, returns output. Internal information about the model, such as the architecture, optimisation procedure, or training data, is not disclosed explicitly as it might contain proprietary information or make the system more vulnerable. This work shows that such attributes of neural networks can be exposed from a sequence of queries. This has ...

متن کامل

Reverse Social Engineering Attacks in Online Social Networks

Social networks are some of the largest and fastest growing online services today. Facebook, for example, has been ranked as the second most visited site on the Internet, and has been reporting growth rates as high as 3% per week. One of the key features of social networks is the support they provide for finding new friends. For example, social network sites may try to automatically identify wh...

متن کامل

RegnANN: Reverse Engineering Gene Networks Using Artificial Neural Networks

RegnANN is a novel method for reverse engineering gene networks based on an ensemble of multilayer perceptrons. The algorithm builds a regressor for each gene in the network, estimating its neighborhood independently. The overall network is obtained by joining all the neighborhoods. RegnANN makes no assumptions about the nature of the relationships between the variables, potentially capturing h...

متن کامل

Parameter estimation in spiking neural networks: a reverse-engineering approach.

This paper presents a reverse engineering approach for parameter estimation in spiking neural networks (SNNs). We consider the deterministic evolution of a time-discretized network with spiking neurons, where synaptic transmission has delays, modeled as a neural network of the generalized integrate and fire type. Our approach aims at by-passing the fact that the parameter estimation in SNN resu...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

ژورنال

عنوان ژورنال: IEEE Transactions on Reliability

سال: 2022

ISSN: ['1558-1721', '0018-9529']

DOI: https://doi.org/10.1109/tr.2021.3105697