Search papers, labs, and topics across Lattice.
This paper introduces SPINE, a GDB-driven profiling framework that simulates cumulative weight bit-flips in quantized neural networks deployed on edge devices, allowing for the generation of per-layer fault profiles without the need for model retraining or code modification. The study reveals how accumulated faults can lead to mispredictions, providing critical insights into the vulnerabilities of neural networks under radiation exposure. Key findings suggest that selective hardening strategies can be effectively tailored based on the fault profiles generated, enhancing the robustness of edge-deployed models against such errors.
Cumulative bit-flips can drastically alter predictions in quantized neural networks, but SPINE reveals how to strategically harden models against these vulnerabilities.
Deploying deep neural networks at the edge demands efficient inference under strict cost and power constraints. Quantized neural networks address these demands by replacing floating-point parameters with low-precision integers, yet their weights remain continuously exposed to radiation-induced bit-flips during inference. Fault Injection can be used to simulate those environments, but existing studies fail to characterize how accumulated upsets translate into mispredictions under realistic memory layouts. This paper presents a GDB-driven profiling framework that injects cumulative weight bit-flips directly onto the target binary of edge CPUs, generating per-layer fault profiles without requiring model retraining or code modification. Evaluated across multiple topologies, quantization efforts, and memory layouts, the results indicate how selective hardening strategies should be applied to effectively protect neural networks.