about
Survey of Attacks and Defenses on Edge-Deployed Neural Networks (arxiv.org)
6 points by blopeur on Dec 6, 2019 | hide | past | pdf | discuss on HN

In plain words: A review of ways attackers can break or steal neural networks running on phones and small devices, sorting attacks and defenses into a clear map. It finds these devices need new protections, since normal cybersecurity misses stolen models, rebuilt user inputs, and tricked predictions.

Abstract

Deep Neural Network (DNN) workloads are quickly moving from datacenters onto edge devices, for latency, privacy, or energy reasons. While datacenter networks can be protected using conventional cybersecurity measures, edge neural networks bring a host of new security challenges. Unlike classic IoT applications, edge neural networks are typically very compute and memory intensive, their execution is data-independent, and they are robust to noise and faults. Neural network models may be very expensive to develop, and can potentially reveal information about the private data they were trained on, requiring special care in distribution. The hidden states and outputs of the network can also be used in reconstructing user inputs, potentially violating users' privacy. Furthermore, neural networks are vulnerable to adversarial attacks, which may cause misclassifications and violate the integrity of the output. These properties add challenges when securing edge-deployed DNNs, requiring new considerations, threat models, priorities, and approaches in securely and privately deploying DNNs to the edge. In this work, we cover the landscape of attacks on, and defenses, of neural networks deployed in edge devices and provide a taxonomy of attacks and defenses targeting edge DNNs.

Mihailo Isakov, Vijay Gadepally, Karen M. Gettings, Michel A. Kinsy
arXiv:1911.11932 · cs.CR, cs.LG, stat.ML · submitted Nov 27, 2019
abstract · pdf · html

add comment on HN