Trustworthy Distributed Brain-inspired Systems: Theoretical Basis and Hardware Implementation

人工神经网络（ANN）是越来越多与关键系统集成并使用敏感用户数据的应用程序的核心，这使得安全和隐私问题变得至关重要。在机器人应用中损害用于对象检测的分类器可能导致安全故障，而敏感数据（例如医疗记录）的泄漏会引起用户的隐私问题和提供商的法律的暴露。最近，联邦学习（FL）成为一种有前途的分布式学习方法，它可以从属于多个参与者的数据中学习，而不会损害隐私，因为用户数据从不直接交换。虽然FL已被推广为一种隐私保护方法，但最近的研究表明，这种方法容易受到复杂的攻击，这些攻击可能会危及这些系统的完整性和隐私，或以其他方式破坏其运行。现有的防御措施无法覆盖FL系统面临的威胁范围，并且在某些情况下，防御一类攻击会增加对其他攻击的脆弱性。此外，现有技术的防御需要高功率开销，这对于FL系统中的嵌入式系统和边缘节点可能是不实际的。虽然人工神经网络是机器学习（ML）的事实上的架构，但像尖峰神经网络（SNN）这样的神经形态架构最近已经成为一种有吸引力的替代方案，因为它们具有生物可扩展性和大脑启发的功能。此外，神经形态硬件可以利用异步神经元的行为来实现显着的高能效。此外，我们的初步研究表明，这些架构相比，人工神经网络在安全性方面的优越性。我们相信这些优势使神经形态架构成为安全和隐私保护的低功耗分布式智能系统的一个有前途的候选人。在TruBrain中，我们提出了一个研究工作，对隐私保护，安全和低功耗的分布式智能系统。我们的研究目标如下：-E11：调查神经形态节点的安全和隐私威胁，并描述其固有的安全性和隐私保护特性-E12：构建安全的大脑启发FL架构：我们利用大脑启发的架构来开发可证明安全的实用神经形态FL系统。第三章：通过硬件感知的理论研究，弥合分布式神经形态学习系统安全性理论与实践之间的差距。- 图4：在FPGA上设计和实现神经形态FL节点的硬件平台，并将其集成到RISC-V架构中。- 目标5：在医疗应用用例中展示我们的神经形态FL范例，并从安全和隐私的角度验证其可信度。

Artificial Neural Networks (ANNs) are at the core of an increasing number of applications integrated with critical systems and using sensitive user data, making security and privacy concerns critical. Compromising a classifier for object detection in a robotic application can lead to safety breakdowns, while leakage of sensitive data, such as medical records, raises privacy concerns for users and legal exposure for providers. Recently, Federated Learning (FL) emerged as a promising distributed learning approach that enables learning from data belonging to multiple participants, without compromising privacy since user data is never directly exchanged. While FL has been promoted as a privacy-preserving approach, recent studies show that this approach is vulnerable to sophisticated attacks that are able to jeopardise both integrity and privacy of these systems, or otherwise disrupt their operation. Existing defences fall short of covering the range of threats that face FL systems, and in some cases defending against a class of attacks increases the vulnerability to other attacks. Moreover, state-of-art defences require high power overhead that might not be practical for embedded systems and Edge nodes in a FL system. While ANNs are the de-facto architectures for Machine Learning (ML), neuromorphic architectures like Spiking Neural Networks (SNNs) have recently emerged as an attractive alternative, due to their biological plausibility and brain-inspired functionality. Moreover, neuromorphic hardware can exploit the asynchronous neurons' behaviour to achieve significantly high energy efficiency. Besides, our preliminary studies show promising superiority of these architectures compared to ANNs in terms of security. We believe these advantages make neuromorphic architectures a promising candidate for secure and privacy-preserving low power distributed intelligent systems.In TruBrain, we propose a research effort towards privacy-preserving, secure and low power distributed intelligent systems. Our research objectives are as follows:- Objective1: Investigating the security and privacy threats for Neuromorphic nodes and characterising their inherent security and privacy-preserving characteristics- Objective2: Building a secure brain-inspired FL architecture: We leverage brain-inspired architectures to develop provably-secure practical neuromorphic FL systems.- Objective3: Bridging the gap between theory and practice in distributed neuromorphic learning systems' security through a hardware-aware theoretical study. - Objective4: Designing and implementing a Hardware platform for neuromorphic FL nodes on FPGA and integrating it in a RISC-V architecture. - Objective 5: Demonstrating our neuromorphic FL paradigm in a medical application use case, and validating its trustworthiness from a security and privacy perspective.