Abstract:Deep neural network (DNN) accelerators overcome the power and memory walls for executing neural-net models locally on edge-computing devices to support sophisticated AI applications. The advocacy of “model once, run optimized anywhere” paradigm introduces potential new security threat to edge intelligence that is methodologically different from the well-known adversarial examples. Existing adversarial examples modify the input samples presented to an AI application either digitally or physically to cause a misclassification. Nevertheless, these input-based perturbations are not robust or surreptitious on multi-view target. To generate a good adversarial example for misclassifying a real-world target of variational viewing angle, lighting and distance, a decent number of target’s samples are required to extract the rare anomalies that can cross the decision boundary. The feasible perturbations are substantial and visually perceptible. In this paper, we propose a new glitch injection attack on DNN accelerator that is capable of misclassifying a target under variational viewpoints. The glitches injected into the computation clock signal induce transitory but disruptive errors in the intermediate results of the multiply-and-accumulate (MAC) operations. The attack pattern for each target of interest consists of sparse instantaneous glitches, which can be derived from just one sample of the target. Two modes of attack patterns are derived, and their effectiveness are demonstrated on four representative ImageNet models implemented on the Deep-learning Processing Unit (DPU) of FPGA edge and its DNN development toolchain. The attack success rates are evaluated on 118 objects in 61 diverse sensing conditions, including 25 viewing angles (−60° to 60°), 24 illumination directions and 12 color temperatures. In the covert mode, the success rates of our attack exceed existing stealthy adversarial examples by more than 16.3%, with only two glitches injected into ten thousands to a million cycles for one complete inference. In the robust mode, the attack success rates on all four DNNs are more than 96.2% with an average glitch intensity of 1.4% and a maximum glitch intensity of 10.2%.

Exploring Vulnerabilities in Spiking Neural Networks: Direct Adversarial Attacks on Raw Event Data

Adversarial attacks on spiking convolutional neural networks for event-based vision

DVS-Attacks: Adversarial Attacks on Dynamic Vision Sensors for Spiking Neural Networks

Attacking the Spike: On the Transferability and Security of Spiking Neural Networks to Adversarial Examples

Sneaky Spikes: Uncovering Stealthy Backdoor Attacks in Spiking Neural Networks with Neuromorphic Data

Adversarial Attack for Asynchronous Event-based Data

Flashy Backdoor: Real-world Environment Backdoor Attack on SNNs with DVS Cameras

Improving Query Efficiency of Black-box Adversarial Attack

Visual Analytics of Neuron Vulnerability to Adversarial Attacks on Convolutional Neural Networks

Adversarial Attacks on Neural-Network-Based Soft Sensors: Directly Attack Output

Exploring Adversarial Attack in Spiking Neural Networks with Spike-Compatible Gradient.

Spiking Neural Networks Subject to Adversarial Attacks in Spiking Domain.

SFTA: Spiking Neural Networks Vulnerable to Spiking Feature Transferable Attack

Stealthy and Robust Glitch Injection Attack on Deep Learning Accelerator for Target with Variational Viewpoint.

SPA: an Efficient Adversarial Attack on Spiking Neural Networks Using Spike Probabilistic

Artificial VO2 Spiking Neurons with Protective Mechanism for Enhancing Resilience of Spiking Neural Network Against Adversarial Attacks

Threaten Spiking Neural Networks Through Combining Rate and Temporal Information

Sparse Adversarial Video Attack Based on Dual-Branch Neural Network on Industrial Artificial Intelligence of Things

NeuroAttack: Undermining Spiking Neural Networks Security through Externally Triggered Bit-Flips

A Comprehensive Analysis on Adversarial Robustness of Spiking Neural Networks

SPARK: Spatial-Aware Online Incremental Attack Against Visual Tracking