Abstract
Deep neural networks (DNNs) have been shown to be vulnerable against adversarial weight bit-flip attacks through hardware-induced fault-injection methods on the memory systems where network parameters are stored. Recent attacks pose the further concerning threat of finding minimal targeted and stealthy weight bit-flips that preserve expected behavior for untargeted test samples. This renders the attack undetectable from a DNN operation perspective. We propose a DNN defense mechanism to improve robustness in such realistic stealthy weight bit-flip attack scenarios. Our output code matching networks use an output coding scheme where the usual one-hot encoding of classes is replaced by partially overlapping bit strings. We show that this encoding significantly reduces attack stealthiness. Importantly, our approach is compatible with existing defenses and DNN architectures. It can be efficiently implemented on pre-trained models by simply re-defining the output classification layer and finetuning. Experimental benchmark evaluations show that output code matching is superior to existing regularized weight quantization based defenses, and an effective defense against stealthy weight bit-flip attacks.
Originalsprache | englisch |
---|---|
Titel | Proceedings - 2022 IEEE/CVF Conference on Computer Vision and Pattern Recognition, CVPR 2022 |
Seiten | 13378-13387 |
Seitenumfang | 10 |
ISBN (elektronisch) | 978-1-6654-6946-3 |
DOIs | |
Publikationsstatus | Veröffentlicht - 2022 |
Veranstaltung | 2022 IEEE/CVF Conference on Computer Vision and Pattern Recognition: CVPR 2022 - New Orleans Ernest N. Morial Convention Center, Hybrider Event, New Orleans, USA / Vereinigte Staaten Dauer: 21 Juni 2022 → 24 Sept. 2022 Konferenznummer: 2022 |
Publikationsreihe
Name | Proceedings of the IEEE Computer Society Conference on Computer Vision and Pattern Recognition |
---|---|
Band | 2022-June |
ISSN (Print) | 1063-6919 |
Konferenz
Konferenz | 2022 IEEE/CVF Conference on Computer Vision and Pattern Recognition |
---|---|
Kurztitel | CVPR 2022 |
Land/Gebiet | USA / Vereinigte Staaten |
Ort | Hybrider Event, New Orleans |
Zeitraum | 21/06/22 → 24/09/22 |
ASJC Scopus subject areas
- Artificial intelligence
- Maschinelles Sehen und Mustererkennung
Fields of Expertise
- Information, Communication & Computing