AIセキュリティポータル K Program
Exploiting Logic Locking for a Neural Trojan Attack on Machine Learning Accelerators
Share
Abstract
Logic locking has been proposed to safeguard intellectual property (IP) during chip fabrication. Logic locking techniques protect hardware IP by making a subset of combinational modules in a design dependent on a secret key that is withheld from untrusted parties. If an incorrect secret key is used, a set of deterministic errors is produced in locked modules, restricting unauthorized use. A common target for logic locking is neural accelerators, especially as machine-learning-as-a-service becomes more prevalent. In this work, we explore how logic locking can be used to compromise the security of a neural accelerator it protects. Specifically, we show how the deterministic errors caused by incorrect keys can be harnessed to produce neural-trojan-style backdoors. To do so, we first outline a motivational attack scenario where a carefully chosen incorrect key, which we call a trojan key, produces misclassifications for an attacker-specified input class in a locked accelerator. We then develop a theoretically-robust attack methodology to automatically identify trojan keys. To evaluate this attack, we launch it on several locked accelerators. In our largest benchmark accelerator, our attack identified a trojan key that caused a 74\% decrease in classification accuracy for attacker-specified trigger inputs, while degrading accuracy by only 1.7\% for other inputs on average.
Keynote: A Disquisition on Logic Locking
Abhishek Chakraborty, Nithyashankari Gummidipoondi Jayasankaran
Published: 2019
Hardware-assisted intellectual property protection of deep learning models
Abhishek Chakraborty, Ankit Mondal, Ankur Srivastava
Published: 2020
DeepHardMark: Towards watermarking neural network hardware
Joseph Clements, Yingjie Lao
Published: 2022
FP-DNN: An automated framework for mapping deep neural networks onto FPGAs with RTL-HLS hybrid templates
Yijin Guan, Hao Liang
Published: 2017
Deep residual learning for image recognition
Kaiming He, Xiangyu Zhang, Shaoqing Ren, Jian Sun
Published: 2016
Reverse engineering convolutional neural networks through side-channel information leaks
W. Hua, Z. Zhang, G. E. Suh
Published: 2018
Advances in Logic Locking: Past, Present, and Prospects
Hadi Mardani Kamali, Kimia Zamiri Azar
Published: 2022
Abs: Scanning neural networks for back-doors by artificial brain stimulation
Liu, Y., Lee, W.-C., Tao, G., Ma, S., Aafer, Y., Zhang, X.
Published: 2019
A survey on neural trojans
Yuntao Liu, Ankit Mondal, Abhishek Chakraborty, Michael Zuzak, Nina Jacobsen, Daniel Xing, Ankur Srivastava
Published: 2020
Robust and attack resilient logic locking with a high application-level impact
Yuntao Liu, Michael Zuzak, Yang Xie, Abhishek Chakraborty, Ankur Srivastava
Published: 2021
Survey of machine learning accelerators
Albert Reuther, Peter Michaleas, Michael Jones, Vijay Gadepally, Siddharth Samsi, Jeremy Kepner
Published: 2020
A primer on hardware security: Models, methods, and metrics
M. Rostami, et al.
Published: 2014
CASLock: A Security-Corruptibility Trade-off Resilient Logic Locking Scheme
Bicky Shakya, Xiaolin Xu, Mark Tehranipoor, Domenic Forte
Published: 2020
On the approximation resiliency of logic locking and IC camouflaging schemes
Kaveh Shamsi, Travis Meade, Meng Li, David Z Pan, Yier Jin
Published: 2018
A review of machine learning and deep learning applications
Pramila P Shinde, Seema Shah
Published: 2018
Evaluating the security of logic encryption algorithms
P. Subramanyan, S. Ray, S. Malik
Published: 2015
Anti-sat: Mitigating sat attack on logic locking
Yang Xie, Ankur Srivastava
Published: 2018
Cache Telepathy: Leveraging Shared Resource Attacks to Learn DNN Architectures
Mengjia Yan, Christopher Fletcher, Josep Torrellas
Published: 8.15.2018
SARLock: SAT attack resistant logic locking
M. Yasin, B. Mazumdar, J. J. Rajendran, O. Sinanoglu
Published: 2016
Provably-secure logic locking: From theory to practice
M. Yasin, A. Sengupta, M. T. Nabeel, M. Ashraf, J. J. Rajendran, O. Sinanoglu
Published: 2017
DNNBuilder: An automated tool for building high-performance DNN hardware accelerators for FPGAs
Xiaofan Zhang, Junsong Wang, Chao Zhu, Yonghua Lin, Jinjun Xiong, Wen-mei Hwu, Deming Chen
Published: 2018
Resolving the Trilemma in Logic Encryption
Hai Zhou, Amin Rezaei, Yuanqi Shen
Published: 2019
Trace Logic Locking: Improving the Parametric Space of Logic Locking
Michael Zuzak, Yuntao Liu, Ankur Srivastava
Published: 2020
A Resource Binding Approach to Logic Obfuscation
Michael Zuzak, Yuntao Liu, Ankur Srivastava
Published: 2021
Share