Search papers, labs, and topics across Lattice.
This paper introduces a noise-aware anomaly detection framework for collaborative DNN inference to identify stealthy misclassifications caused by malicious data injections in edge-AI systems. A variational autoencoder (VAE) is used to model normal data distributions and detect deviations caused by adversarial attacks, incorporating a noise-aware feature to improve detection accuracy under noisy conditions. Experiments on object classification DNNs demonstrate the framework's robustness, achieving up to 90% AUROC under realistic noisy conditions.
Even with environmental noise, a VAE-based anomaly detector can spot adversarial attacks on collaborative DNNs with high accuracy.
Collaborative inference of object classification Deep neural Networks (DNNs) where resource-constrained end-devices offload partially processed data to remote edge servers to complete end-to-end processing, is becoming a key enabler of edge-AI. However, such edge-offloading is vulnerable to malicious data injections leading to stealthy misclassifications that are tricky to detect, especially in the presence of environmental noise. In this paper, we propose a semi-gray-box and noise- aware anomaly detection framework fueled by a variational autoencoder (VAE) to capture deviations caused by adversarial manipulation. The proposed framework incorporates a robust noise-aware feature that captures the characteristic behavior of environmental noise to improve detection accuracy while reducing false alarm rates. Our evaluation with popular object classification DNNs demonstrate the robustness of the proposed detection (up to 90% AUROC across DNN configurations) under realistic noisy conditions while revealing limitations caused by feature similarity and elevated noise levels.
