Search papers, labs, and topics across Lattice.
This paper investigates the resilience of embedded neural network models against electromagnetic fault injection (EMFI) attacks by evaluating the impact of different number representations (32-bit and 16-bit floating-point, 8-bit and 4-bit integer) on model accuracy. The authors deployed ResNet-18, ResNet-34, ResNet-50, and VGG-11 on an embedded memory chip and used a low-cost EMFI platform to inject faults. The key finding is that integer representations, particularly 8-bit, demonstrate significantly better resistance to EMFI attacks compared to floating-point representations, maintaining higher Top-1 and Top-5 accuracies after fault injection.
Floating-point precision in embedded neural networks makes them shockingly vulnerable: a single electromagnetic fault injection can almost completely degrade accuracy, while integer representations offer significantly better resilience.
Fault injection attacks on embedded neural network models have been shown as a potent threat. Numerous works studied resilience of models from various points of view. As of now, there is no comprehensive study that would evaluate the influence of number representations used for model parameters against electromagnetic fault injection (EMFI) attacks. In this paper, we investigate how four different number representations influence the success of an EMFI attack on embedded neural network models. We chose two common floating-point representations (32-bit, and 16-bit), and two integer representations (8-bit, and 4-bit). We deployed four common image classifiers, ResNet-18, ResNet-34, ResNet-50, and VGG-11, on an embedded memory chip, and utilized a low-cost EMFI platform to trigger faults. Our results show that while floating-point representations exhibit almost a complete degradation in accuracy (Top-1 and Top-5) after a single fault injection, integer representations offer better resistance overall. Especially, when considering the the 8-bit representation on a relatively large network (VGG-11), the Top-1 accuracies stay at around 70% and the Top-5 at around 90%.
