Physical Side-Channel Attacks on Embedded Neural Networks: A Survey - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Applied Sciences Année : 2021

Physical Side-Channel Attacks on Embedded Neural Networks: A Survey

Résumé

During the last decade, Deep Neural Networks (DNN) have progressively been integrated on all types of platforms, from data centers to embedded systems including low-power processors and, recently, FPGAs. Neural Networks (NN) are expected to become ubiquitous in IoT systems by transforming all sorts of real-world applications, including applications in the safety-critical and security-sensitive domains. However, the underlying hardware security vulnerabilities of embedded NN implementations remain unaddressed. In particular, embedded DNN implementations are vulnerable to Side-Channel Analysis (SCA) attacks, which are especially important in the IoT and edge computing contexts where an attacker can usually gain physical access to the targeted device. A research field has therefore emerged and is rapidly growing in terms of the use of SCA including timing, electromagnetic attacks and power attacks to target NN embedded implementations. Since 2018, research papers have shown that SCA enables an attacker to recover inference models architectures and parameters, to expose industrial IP and endangers data confidentiality and privacy. Without a complete review of this emerging field in the literature so far, this paper surveys state-of-the-art physical SCA attacks relative to the implementation of embedded DNNs on micro-controllers and FPGAs in order to provide a thorough analysis on the current landscape. It provides a taxonomy and a detailed classification of current attacks. It first discusses mitigation techniques and then provides insights for future research leads.
Fichier principal
Vignette du fichier
Real_Salvador_2021.pdf (598.41 Ko) Télécharger le fichier
Origine : Publication financée par une institution

Dates et versions

hal-03324220 , version 1 (22-10-2021)

Licence

Paternité

Identifiants

Citer

Maria Mendez Real, Ruben Salvador. Physical Side-Channel Attacks on Embedded Neural Networks: A Survey. Applied Sciences, 2021, 11 (15), pp.6790. ⟨10.3390/app11156790⟩. ⟨hal-03324220⟩
68 Consultations
164 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More