• Complex
  • Title
  • Keyword
  • Abstract
  • Scholars
  • Journal
  • ISSN
  • Conference
成果搜索

author:

Liao, Longlong (Liao, Longlong.) [1] | Zheng, Yuqiang (Zheng, Yuqiang.) [2] | Lu, Hong (Lu, Hong.) [3] | Liu, Xinqi (Liu, Xinqi.) [4] | Chen, Shuguang (Chen, Shuguang.) [5] | Yu, Yuanlong (Yu, Yuanlong.) [6]

Indexed by:

EI

Abstract:

Deep learning inference on edge devices is susceptible to security threats, particularly fault injection attacks (FIAs), which are easily executed and pose a significant risk to the inference. These attacks could potentially lead to alterations to the memory of the edge device or errors in the execution of instructions. Specifically, time-intensive convolution computation is considerably vulnerable in deep learning inference at the edge. To detect and defend attacks against deep learning inference on heterogeneous edge devices, we propose an efficient hardware-based solution for verifiable model inference named DarkneTV. It leverages an asynchronous mechanism to conduct hash checking of convolution weights and verification of convolution computations within the trusted execution environment (TEE) of the central processing unit (CPU) when the integrated graphics processing unit (GPU) runs model inference. It protects the integrity of convolution weights and the correctness of inference results, and effectively detects abnormal weight modifications and incorrect inference results regarding neural operators. Extensive experimental results show that DarkneTV identifies tiny FIAs against convolution weights and computation with over 99.03% accuracy but less extra time overhead. The asynchronous mechanism significantly improves the performance of verifiable inference. Typically, the speedups of the GPU-accelerated verifiable inference on the Hikey 960 achieve 8.50×-11.31× compared with the CPU-only mode. © 2001-2012 IEEE.

Keyword:

Computer graphics Computer graphics equipment Convolution Deep learning Edge detection Graphics processing unit Inference engines Network security Program processors Software testing

Community:

  • [ 1 ] [Liao, Longlong]Fuzhou University, College of Computer and Data Science, Fuzhou; 350108, China
  • [ 2 ] [Liao, Longlong]The University of Hong Kong, Faculty of Science, Hong Kong; 999077, Hong Kong
  • [ 3 ] [Zheng, Yuqiang]Fuzhou University, College of Computer and Data Science, Fuzhou; 350108, China
  • [ 4 ] [Lu, Hong]Nanjing Normal University of Special Education, School of Mathematics and Information Science, Nanjing; 210038, China
  • [ 5 ] [Lu, Hong]Nanjing University of Science and Technology Zijin College, College of Computer and Artificial Intelligence, Nanjing; 210094, China
  • [ 6 ] [Liu, Xinqi]The University of Hong Kong, Faculty of Engineering, Hong Kong; 999077, Hong Kong
  • [ 7 ] [Chen, Shuguang]The University of Hong Kong, Faculty of Science, Hong Kong; 999077, Hong Kong
  • [ 8 ] [Yu, Yuanlong]Fuzhou University, College of Computer and Data Science, Fuzhou; 350108, China

Reprint 's Address:

Email:

Show more details

Related Keywords:

Source :

IEEE Sensors Journal

ISSN: 1530-437X

Year: 2024

Issue: 17

Volume: 24

Page: 28351-28362

4 . 3 0 0

JCR@2023

Cited Count:

WoS CC Cited Count:

SCOPUS Cited Count:

ESI Highly Cited Papers on the List: 0 Unfold All

WanFang Cited Count:

Chinese Cited Count:

30 Days PV: 0

Affiliated Colleges:

Online/Total:89/10022131
Address:FZU Library(No.2 Xuyuan Road, Fuzhou, Fujian, PRC Post Code:350116) Contact Us:0591-22865326
Copyright:FZU Library Technical Support:Beijing Aegean Software Co., Ltd. 闽ICP备05005463号-1