Abstract:The execution of deep neural network (DNN) algorithms suffers from significant bottlenecks due to the separation of the processing and memory units in traditional computer systems. Emerging memristive computing systems introduce an in situ approach that overcomes this bottleneck. The non-volatility of memristive devices, however, may expose the DNN weights stored in memristive crossbars to potential theft attacks. Therefore, this paper proposes a two-dimensional permutation-based protection (TDPP) method that thwarts such attacks. We first introduce the underlying concept that motivates the TDPP method: permuting both the rows and columns of the DNN weight matrices. This contrasts with previous methods, which focused solely on permuting a single dimension of the weight matrices, either the rows or columns. While it's possible for an adversary to access the matrix values, the original arrangement of rows and columns in the matrices remains concealed. As a result, the extracted DNN model from the accessed matrix values would fail to operate correctly. We consider two different memristive computing systems (designed for layer-by-layer and layer-parallel processing, respectively) and demonstrate the design of the TDPP method that could be embedded into the two systems. Finally, we present a security analysis. Our experiments demonstrate that TDPP can achieve comparable effectiveness to prior approaches, with a high level of security when appropriately parameterized. In addition, TDPP is more scalable than previous methods and results in reduced area and power overheads. The area and power are reduced by, respectively, 1218× and 2815× for the layer-by-layer system and by 178× and 203× for the layer-parallel system compared to prior works.

A New Paradigm for Immunization of Deep Neural Networks Against Replication Attacks Based on Spintronics

TDPP: 2-D Permutation-Based Protection of Memristive Deep Neural Networks

A Proposal for Energy-Efficient Cellular Neural Network based on Spintronic Devices

Noise resilient leaky integrate-and-fire neurons based on multi-domain spintronic devices

Preventing Distillation-based Attacks on Neural Network IP

Spintronic Neuron Using a Magnetic Tunnel Junction for Low-Power Neuromorphic Computing

Stochastic Spiking Neural Networks Enabled by Magnetic Tunnel Junctions: From Nontelegraphic to Telegraphic Switching Regimes

NeuroAttack: Undermining Spiking Neural Networks Security through Externally Triggered Bit-Flips

Proposal for an All-Spin Artificial Neural Network: Emulating Neural and Synaptic Functionalities Through Domain Wall Motion in Ferromagnets

SNNGX: Securing Spiking Neural Networks with Genetic XOR Encryption on RRAM-based Neuromorphic Accelerator

Practical Attacks on Deep Neural Networks by Memory Trojaning.

All Spin Artificial Neural Networks Based on Compound Spintronic Synapse and Neuron.

Artificial VO2 Spiking Neurons with Protective Mechanism for Enhancing Resilience of Spiking Neural Network Against Adversarial Attacks

Spintronic leaky-integrate-fire spiking neurons with self-reset and winner-takes-all for neuromorphic computing

Magnetic Tunnel Junction Based Long-Term Short-Term Stochastic Synapse for a Spiking Neural Network with On-Chip STDP Learning

Live Trojan Attacks on Deep Neural Networks

DNN-Defender: An in-DRAM Deep Neural Network Defense Mechanism for Adversarial Weight Attack

Analysis of Power-Oriented Fault Injection Attacks on Spiking Neural Networks

Older and Wiser: The Marriage of Device Aging and Intellectual Property Protection of Deep Neural Networks

Sneaky Spikes: Uncovering Stealthy Backdoor Attacks in Spiking Neural Networks with Neuromorphic Data

Leveraging Spintronic Devices for Efficient Approximate Logic and Stochastic Neural Networks