Abstract:Deep neural network (DNN) accelerators are widely deployed in computer vision, speech recognition, and machine translation applications, in which attacks on DNNs have become a growing concern. This article focuses on exploring the implications of hardware Trojan attacks on DNNs. Trojans are one of the most challenging threat models in hardware security where adversaries insert malicious modifications to the original integrated circuits (ICs), leading to malfunction once being triggered. Such attacks can be conducted by adversaries because modern ICs commonly include third-party intellectual property (IP) blocks. Previous studies design hardware Trojans to attack DNNs with the assumption that adversaries have full knowledge or manipulation of the DNN systems' victim model and toolchain in addition to the hardware platforms, yet such a threat model is strict, limiting their practical adoption. In this article, we propose a memory Trojan methodology that implants the malicious logics merely into the memory controllers of DNN systems without the necessity of toolchain manipulation or accessing to the victim model and thus is feasible for practical uses. Specifically, we locate the input image data among the massive volume of memory traffics based on memory access patterns and propose a Trojan trigger mechanism based on detecting the geometric feature in input images. Extensive experiments show that the proposed trigger mechanism is effective even in the presence of environmental noises and preprocessing operations. Furthermore, we design and implement the payload and verify that the proposed Trojan technique can effectively conduct both untargeted and targeted attacks on DNNs.

Detecting Neural Trojans Through Merkle Trees

Topological Detection of Trojaned Neural Networks

An Embarrassingly Simple Approach for Trojan Attack in Deep Neural Networks

PerD: Perturbation Sensitivity-based Neural Trojan Detection Framework on NLP Applications

Cassandra: Detecting Trojaned Networks from Adversarial Perturbations

DeepInspect: A Black-box Trojan Detection and Mitigation Framework for Deep Neural Networks

A Survey of Trojan Attacks and Defenses to Deep Neural Networks

Trojan Cleansing with Neural Collapse

MDTD: A Multi Domain Trojan Detector for Deep Neural Networks

Practical Detection of Trojan Neural Networks: Data-Limited and Data-Free Cases

STRIP: A Defence Against Trojan Attacks on Deep Neural Networks

Dormant Neural Trojans

Live Trojan Attacks on Deep Neural Networks

Hardware Trojan Attacks on Neural Networks

Odyssey: Creation, Analysis and Detection of Trojan Models

Detecting Trojaned DNNs Using Counterfactual Attributions

Trojan Signatures in DNN Weights

Scalable Backdoor Detection in Neural Networks

PoTrojan: Powerful Neural-Level Trojan Designs in Deep Learning Models.

Practical Attacks on Deep Neural Networks by Memory Trojaning.

CLEANN: Accelerated Trojan Shield for Embedded Neural Networks