Adversarial Attack Bypass by Stochastic Computing
Deep learning excels by utilizing vast datasets and sophisticated training algorithms. It achieves superior performance across many machine learning challenges compared to traditional methods. However, deep neural networks (DNNs) are not flawless; they are particularly susceptible to adversarial samples during the inference phase. These inputs area deliberately designed by attackers to cause DNNs to make incorrect classifications, exploiting the networks’ vulnerabilities. This letter proposes a novel perspective to fortify the neural network (NN) defense against adversarial attacks. We enhance the NN security by employing an emerging model of computation, namely, stochastic computing (SC). We show that strengthening NN with SC counteracts the adverse effects of these attacks on an NN output and adds a vital defense layer. Our evaluation results reveal that SC notably increases NN robustness and decreases susceptibility to interference, creating secure, reliable NN systems. The proposed method improves accuracy and reduces hardware footprint and energy consumption by up to 85%, 88%, and 95%, respectively.
Authors
- M. Hassan Najafi (ORCID: https://orcid.org/0000-0002-4655-6229)
- Bingzhe Li (ORCID: https://orcid.org/0000-0002-5815-9706)
- Sercan Aygün (ORCID: https://orcid.org/0000-0002-4615-7914)
- Mehran Shoushtari Moghadam (ORCID: https://orcid.org/0000-0002-1325-1664)
- Faeze S. Banitaba (ORCID: https://orcid.org/0009-0004-8569-4423)
- Amirhossein Jalilvand
Institutions
- The University of Texas at Dallas (US)
- University of Dallas (US)
- Case Western Reserve University (US)
- University of Louisiana at Lafayette (US)
Publication Details
- Journal
- IEEE Embedded Systems Letters
- Published
- 2025-02-04
- DOI
- https://doi.org/10.1109/les.2025.3538552
- Citations
- 3
- Primary Topic
- Adversarial Robustness in Machine Learning
- Type
- article
- Field-Weighted Citation Impact
- 7.44
Funders
- National Science Foundation
- Cisco Systems
- Nvidia