Abstract:This study investigates the impact of transient hardware faults and algorithmic inaccuracies on DNN misclassifications in terms of safety‐critical behavior. Specifically, this study offers a more comprehensive understanding of the impact of multifaceted factors influencing the likelihood of safety‐critical misclassifications across different DNN models. Our thorough findings highlight that transient hardware faults pose a greater risk than intrinsic algorithmic inaccuracies to cause safety‐critical misclassifications. Summary Safety‐critical applications, such as autonomous vehicles, healthcare, and space applications, have witnessed widespread deployment of deep neural networks (DNNs). Inherent algorithmic inaccuracies have consistently been a prevalent cause of misclassifications, even in modern DNNs. Simultaneously, with an ongoing effort to minimize the footprint of contemporary chip design, there is a continual rise in the likelihood of transient hardware faults in deployed DNN models. Consequently, researchers have wondered the extent to which these faults contribute to DNN misclassifications compared to algorithmic inaccuracies. This article delves into the impact of DNN misclassifications caused by transient hardware faults and intrinsic algorithmic inaccuracies in safety‐critical applications. Initially, we enhance a cutting‐edge fault injector, TensorFI, for TensorFlow applications to facilitate fault injections on modern DNN non‐sequential models in a scalable manner. Subsequently, we analyse the DNN‐inferred outcomes based on our defined safety‐critical metrics. Finally, we conduct extensive fault injection experiments and a comprehensive analysis to achieve the following objectives: (1) investigate the impact of different target class groupings on DNN failures and (2) pinpoint the most vulnerable bit locations within tensors, as well as DNN layers accountable for the majority of safety‐critical misclassifications. Our findings regarding different grouping formations reveal that failures induced by transient hardware faults can have a substantially greater impact (with a probability up to 4 × higher) on safety‐critical applications compared to those resulting from algorithmic inaccuracies. Additionally, our investigation demonstrates that higher order bit positions in tensors, as well as initial and final layers of DNNs, necessitate prioritized protection compared to other regions.

A Cross-Layer Fault Propagation Analysis Method for Edge Intelligence Systems Deployed with DNNs

Two-Stream Boundary-Aware Neural Network for Concrete Crack Segmentation and Quantification

Improving Fault Tolerance for Reliable DNN Using Boundary-Aware Activation

FTT-NAS: Discovering Fault-Tolerant Convolutional Neural Architecture

A Deep Investigation on Stealthy DVFS Fault Injection Attacks at DNN Hardware Accelerators

Investigating the impact of transient hardware faults on deep learning neural network inference

Imperceptible Misclassification Attack on Deep Learning Accelerator by Glitch Injection

Algorithm-Based Fault Tolerance for Convolutional Neural Networks

A Survey on Impact of Transient Faults on BNN Inference Accelerators

A Deep Learning-Based Surface Defect Inspection System Using Multiscale and Channel-Compressed Features

Structural Crack Detection Using Deep Learning–based Fully Convolutional Networks

Cross-Layer Optimization for Fault-Tolerant Deep Learning

Lightweight Fault Prediction Method for Edge Networks

A Smart Surface Inspection System Using Faster R-CNN in Cloud-Edge Computing Environment

Researching the CNN Collaborative Inference Mechanism for Heterogeneous Edge Devices

Adaptive Soft Error Protection for Deep Learning

Path Analysis for Effective Fault Localization in Deep Neural Networks

An Autonomous Error-Tolerant Architecture Featuring Self-reparation for Convolutional Neural Networks

Mind Your Heart: Stealthy Backdoor Attack on Dynamic Deep Neural Network in Edge Computing

Soft Error Mitigation for Deep Convolution Neural Network on FPGA Accelerators.

Hu-Fu: Hardware and Software Collaborative Attack Framework against Neural Networks