Abstract:This paper proposes and evaluates the applications of different DL techniques including the Convolutional Neural Network (CNN) and the multilayer perceptron (MLP) models for non‐profiled attacks on the AES‐128 encryption implementation. Along with the designed models, a dataset reconstruction and labelling technique for the proposed model has also been performed for solving the high dimension data and imbalanced dataset problem. As a result, the DL‐based SCA with our reconstructed dataset for different targets of ASCAD, RISC‐V microcontroller, and ChipWhisperer boards has achieved a higher performance of non‐profiled attacks. The experimental results have clarified that the exponential linear unit (ELU) function is better than the rectified linear unit (ReLU) in taking the correct key with the presence of the Gaussian noise. In modern embedded systems, security issues including side‐channel attacks (SCAs) are becoming of paramount importance since the embedded devices are ubiquitous in many categories of consumer electronics. Recently, deep learning (DL) has been introduced as a new promising approach for profiled and non‐profiled SCAs. This paper proposes and evaluates the applications of different DL techniques including the Convolutional Neural Network and the multilayer perceptron models for non‐profiled attacks on the AES‐128 encryption implementation. Especially, the proposed network is fine‐tuned with different number of hidden layers, labelling techniques and activation functions. Along with the designed models, a dataset reconstruction and labelling technique for the proposed model has also been performed for solving the high dimension data and imbalanced dataset problem. As a result, the DL based SCA with our reconstructed dataset for different targets of ASCAD, RISC‐V microcontroller, and ChipWhisperer boards has achieved a higher performance of non‐profiled attacks. Specifically, necessary investigations to evaluate the efficiency of the proposed techniques against different SCA countermeasures, such as masking and hiding, have been performed. In addition, the effect of the activation function on the proposed DL models was investigated. The experimental results have clarified that the exponential linear unit function is better than the rectified linear unit in fighting against noise generation‐based hiding countermeasure.

NNLeak: An AI-Oriented DNN Model Extraction Attack through Multi-Stage Side Channel Analysis

D-DAE: Defense-Penetrating Model Extraction Attacks.

DeepTheft: Stealing DNN Model Architectures through Power Side Channel

Stealing Neural Network Structure Through Remote FPGA Side-Channel Analysis

Like an Open Book? Read Neural Network Architecture with Simple Power Analysis on 32-bit Microcontrollers

DeepEM: Deep Neural Networks Model Recovery through EM Side-Channel Information Leakage

Precise Extraction of Deep Learning Models via Side-Channel Attacks on Edge/Endpoint Devices

Defense against ML-based Power Side-channel Attacks on DNN Accelerators with Adversarial Attacks

Mercury: An Automated Remote Side-channel Attack to Nvidia Deep Learning Accelerator

Layer Sequence Extraction of Optimized DNNs Using Side-Channel Information Leaks

Leaky DNN: Stealing Deep-Learning Model Secret with GPU Context-Switching Side-Channel

Neural Network Model Extraction Attacks in Edge Devices by Hearing Architectural Hints

Leaky Nets: Recovering Embedded Neural Network Models and Inputs Through Simple Power and Timing Side-Channels—Attacks and Defenses

Acnn: arbitrary trace attacks based on leakage area detection

A Systematic View of Leakage Risks in Deep Neural Network Systems

A Hard-Label Cryptanalytic Extraction of Non-Fully Connected Deep Neural Networks using Side-Channel Attacks

On the performance of non‐profiled side channel attacks based on deep learning techniques

Open DNN Box by Power Side-Channel Attack

Side-Channel Fuzzy Analysis-Based AI Model Extraction Attack with Information-Theoretic Perspective in Intelligent IoT

Deep Learning Side-Channel Collision Attack

CSI Neural Network: Using Side-channels to Recover Your Artificial Neural Network Information