LoS Trick: Countermeasure against CPA for DNN Models Using Loss of Significance in Multiply-Accumulate Operations
The recent advancements in deep neural network (DNN) models have revolutionized image recognition, natural language processing, and healthcare. However, deploying DNN models in IoT devices introduces significant security risks, particularly side-channel attacks such as correlation power analysis (CPA). In this paper, we introduce a novel countermeasure named loss of significance (LoS) trick LoS trick is designed to protect DNN models from CPA attacks by reducing signal-to-noise ratio (SNR) during the multiply-accumulate operations. We reduce information leakage in power consumption traces by adding large absolute values in the initial stages of multiply-accumulate operations. LoS trick increases the difficulty of obtaining accurate weight parameters. This paper details the theoretical foundation of LoS trick and its implementation methodology and validates its effectiveness through simulations. The results demonstrate that LoS trick outperforms conventional countermeasures, providing a scalable solution to enhance the security of DNN models in IoT environments.
Authors
- Kazuo Sakiyama (ORCID: https://orcid.org/0000-0002-4414-815X)
- Daiki Miyahara (ORCID: https://orcid.org/0000-0002-5818-8937)
- Yang Li (ORCID: https://orcid.org/0000-0003-0219-5289)
- Ryunosuke Amano
Institutions
- University of Electro-Communications (JP)
Publication Details
- Published
- 2024-11-26
- DOI
- https://doi.org/10.1109/candarw64572.2024.00046
- Citations
- 1
- Primary Topic
- Advanced Memory and Neural Computing
- Type
- article
- Field-Weighted Citation Impact
- 0.21