NNTesting: Neural Network Fault Attacks Detection Using Gradient-Based Test Vector Generation
NNTesting: Neural Network Fault Attacks Detection Using Gradient-Based Test Vector Generation
复制标题
DOI：
10.1109/dac56929.2023.10247885
复制
发表时间：
2023-07
期刊：
影响因子：
--
通讯作者：
Antian Wang;Bingyin Zhao;Weihang Tan;Yingjie Lao
中科院分区：
文献类型：
--
作者：
Antian Wang;Bingyin Zhao;Weihang Tan;Yingjie Lao
Recent studies have shown Neural Networks (NNs) are highly vulnerable to fault attacks. This work proposes a novel defensive framework, NNTesting, for detecting the fault attack and recovering the model. We first leverage gradient-based optimization to generate a set of high-quality Test Vectors (TVs) that effectively differentiate faulty profile models and further optimize the TV set by reducing the TVs through compression. The selected final TV set is then used to recover the model. The effectiveness of the proposed method is comprehensively evaluated on a wide range of models across various benchmark datasets. For instance, we successfully generate more than thousands of TV candidates using a gradient-based generation method. After compression, we achieve up to 94.76% detection success rate with only 140 TVs on the CIFAR-10 dataset.
