This chapter introduce a shuffle and substitution-based defense mechanism (SSDM) to mitigate hardware-level threats and backdoor attacks. SSDM leverages pixel-level shuffling, neuron-level shuffling, and substitution techniques to enhance security without significantly degrading classification performance. Experimental evaluations demonstrate that SSDM effectively reduces the success rates of various hardware Trojan (HT) and backdoor attack types, providing a robust defense strategy for CNN accelerators while maintaining an acceptable trade-off with model accuracy.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A Case Study on Shuffle and Substitution-Based Defense Mechanism

  • Haosen Yu,
  • Peiyao Sun,
  • Basel Halak

摘要

This chapter introduce a shuffle and substitution-based defense mechanism (SSDM) to mitigate hardware-level threats and backdoor attacks. SSDM leverages pixel-level shuffling, neuron-level shuffling, and substitution techniques to enhance security without significantly degrading classification performance. Experimental evaluations demonstrate that SSDM effectively reduces the success rates of various hardware Trojan (HT) and backdoor attack types, providing a robust defense strategy for CNN accelerators while maintaining an acceptable trade-off with model accuracy.