Annual Computer Security Applications Conference (ACSAC) 2018

Full Program »

I Know What You See: Power Side-Channel Attack on Convolutional Neural Network Accelerators

Deep learning has become the de-facto computational paradigm for various kinds of perception problems, including many privacy-sensitive applications such as online medical image analysis. No doubt to say, the data privacy of these deep learning systems is a serious concern. Different from previous research focusing on exploiting privacy leakage from deep learning models, in this paper, we present the first attack on the implementation of deep learning models. To be specific, we perform the attack on an FPGA-based convolutional neural network accelerator and we manage to recover the input image from the collected power traces without knowing the detailed parameters in the neural network. For the MNIST dataset, our power side-channel attack is able to achieve up to 89% recognition accuracy.

Lingxiao Wei
The Chinese University of Hong Kong
Hong Kong

Bo Luo
The Chinese University of Hong Kong
Hong Kong

Yu Li
The Chinese University of Hong Kong
Hong Kong

Yannan Liu
The Chinese University of Hong Kong & Sangfor Technologies
Hong Kong

Qiang Xu
The Chinese University of Hong Kong
Hong Kong

 



Powered by OpenConf®
Copyright©2002-2018 Zakon Group LLC