Model-Extraction Attack Against FPGA-DNN Accelerator Utilizing Correlation Electromagnetic Analysis
Kota Yoshida, Takaya Kubota, Mitsuru Shiozaki, Takeshi Fujino · 2019
This work presents a model-extraction attack on a DNN accelerator, which is implemented on FPGA. An adversary can get DNN model parameters by exploiting electromagnetic leakage from the accelerator during operation. Our experimental results show that the adversary can extract trained model parameters from a DNN accelerator even if the DNN model parameters are protected with data encryption. This suggests that countermeasures against side-channel leaks are important when implementing a DNN accelerator on FPGA or ASIC.