Abstract:Over the past few years, the emergence and development of design space exploration (DSE) have shortened the deployment cycle of deep neural networks (DNNs). As a result, with these open-sourced DSE, we can automatically compute the optimal configuration and generate the corresponding accelerator intellectual properties (IPs) from the pretrained neural network models and hardware constraints. However, to date, the security of DSE has received little attention. Therefore, we explore this issue from an adversarial perspective and propose an automated hardware Trojan (HT) generation framework embedded within DSE. The framework uses an evolutionary algorithm (EA) to analyze user-input data to automatically generate the attack code before placing it in the final output accelerator IPs. The proposed HT is sufficiently stealthy and suitable for both single and multifield-programmable gate array (FPGA) designs. It can also implement controlled accuracy degradation attacks and specified category attacks. We conducted experiments on LeNet, VGG-16, and YOLO, respectively, and found that for the LeNet model trained on the CIFAR-10 dataset, attacking only one kernel resulted in 97.3% of images being classified in the category specified by the adversary and reduced accuracy by 59.58%. Moreover, for the VGG-16 model trained on the ImageNet dataset, attacking eight kernels can cause up to 96.53% of the images to be classified into the category specified by the adversary and causes the model's accuracy to decrease to 2.5%. Finally, for the YOLO model trained on the PASCAL VOC dataset, attacking with eight kernels can cause the model to identify the target as the specified category and cause slight perturbations to the bounding boxes. Compared to the un-compromised designs, the look-up tables (LUTs) overhead of the proposed HT design does not exceed 0.6%.

AttackGNN: Red-Teaming GNNs in Hardware Security Using Reinforcement Learning

PoisonedGNN: Backdoor Attack on Graph Neural Networks-based Hardware Security Systems

Graph Neural Networks for Hardware Vulnerability Analysis -- Can you Trust your GNN?

TrojanForge: Generating Adversarial Hardware Trojan Examples Using Reinforcement Learning

Embracing Graph Neural Networks for Hardware Security (Invited Paper)

FP-GNN: A Graph Neural Network for Hardware Trojan Detection in Gate-Level Netlist

DSE-Based Hardware Trojan Attack for Neural Network Accelerators on FPGAs.

GNNReveal: A Novel Graph Neural Network-based Attack Method for IC Logic Gate De-Camouflaging

Single Node Injection Label Specificity Attack on Graph Neural Networks Via Reinforcement Learning

Contrastive Graph Convolutional Networks for Hardware Trojan Detection in Third Party IP Cores

Hardware Trojan Attacks on Neural Networks

Single-node attacks for fooling graph neural networks

A Portable Hardware Trojan Detection Using Graph Attention Networks

Generating Adversarial Examples for Hardware-Trojan Detection at Gate-Level Netlists

Attack Graph Convolutional Networks by Adding Fake Nodes

Unveiling the potential of Graph Neural Networks for robust Intrusion Detection

GNN-RE: Graph Neural Networks for Reverse Engineering of Gate-Level Netlists

NeuroAttack: Undermining Spiking Neural Networks Security through Externally Triggered Bit-Flips

Semantics-Preserving Reinforcement Learning Attack Against Graph Neural Networks for Malware Detection

Intrusion Detection Based on Generative Adversarial Network of Reinforcement Learning Strategy for Wireless Sensor Networks

GNN4IP: Graph Neural Network for Hardware Intellectual Property Piracy Detection