Guarding Deep Learning Systems With Boosted Evasion Attack Detection and Model Update
Xiangru Chen, Dipal Halder, Kazi Mejbaul Islam, Sandip Kumar Ray · IEEE Internet of Things Journal · 2023
Deep learning systems are susceptible to evasion attacks, which represent a significant category of security vulnerabilities. These attacks entail the alteration of input data in such a way that the victim deep neural network (DNN) misclassifies it. Researchers have devised detection and defense methods to counter evasion attacks; however, these techniques impose a significant computational burden and are not suitable for real-time detection on devices with limited resources. This article presents an infrastructure,${\mathrm{G{\scriptstyle ERALT}}}$designed to improve the efficiency of evasion attack detection for real-time execution on edge devices. It involves a partition analysis that optimizes detection methods and allows for the use of a smaller detection network. Additionally, we propose a hardware architecture that accelerates internetwork inference using intermediate data reuse techniques and enables a different pattern of model updates between cloud servers and edge devices in real-world applications. Furthermore, it is also extended to a principle of internetwork accelerator design, which is evaluated at different PE ratios. Our evaluations demonstrate that${\mathrm{G{\scriptstyle ERALT}}}$achieves more than$3\times $improvement in performance compared to standard accelerators like Eyeriss, without affecting detection and classification accuracy. The boosted model update system avoids the bandwidth limit between edge devices and the cloud server, saving 14 h when updating the model for a new evasion attack.