Search papers, labs, and topics across Lattice.
This paper introduces ARMOR-IMC, a post-training framework designed to enhance the resilience of In-Memory Computing (IMC) accelerators against dual hardware threats: manufacturing Process Variation (PV) and power Side-Channel Attacks (SCAs). By employing the Variation Impact Score (VIS) to strategically map Fault Observation Windows (FOWs) and the Leakage Per Inference (LPI) metric to assess power variability, the framework effectively restores accuracy compromised by PV-induced faults and mitigates security risks. Experimental results demonstrate that while PV can reduce accuracy by over 50%, ARMOR-IMC successfully maintains near-baseline performance without the need for model retraining.
Manufacturing variations can halve accuracy, but ARMOR-IMC restores performance while simultaneously defending against power side-channel attacks.
The massive data-movement overhead in traditional architectures has led to the adoption of In-Memory Computing (IMC) for energy-efficient Deep Neural Network (DNN) processing. By leveraging emerging devices like Spin-Orbit Torque Magnetic Tunnel Junctions (SOT-MTJs), IMC bypasses the "memory wall" and reduces leakage power inherent in traditional CMOS. However, this shift introduces dual hardware threats: manufacturing Process Variation (PV) degrades reliability and increases vulnerability to fault injection, while power Side-Channel Attacks (SCAs) compromise security. Existing defenses address these threats in isolation. This work presents a posttraining framework that simultaneously hardens analog IMC accelerators against both threats without retraining the model. Implemented in the IMAC-Sim simulator, our approach uses the proposed Variation Impact Score (VIS) to guide the mapping of Fault Observation Windows (FOWs) and introduces the Leakage Per Inference (LPI) metric to quantify input-dependent power variability under stochastic injection and the resulting reduction in effective signal-to-noise ratio. Experiments show that PV-induced faults can degrade accuracy by over 50%, while our method restores near-baseline accuracy and mitigates the threat of correlation-based power analysis attacks.
