Title
Counteract Side-Channel Analysis of Neural Networks by Shuffling
Abstract
Machine learning is becoming an essential part in almost every electronic device. Implementations of neural networks are mostly targeted towards computational performance or memory footprint. Nevertheless, security is also an important part in order to keep the network secret and protect the intellectual property associated to the network. Especially, since neural network implementations are demonstrated to be vulnerable to side-channel analysis, powerful and computational cheap countermeasures are in demand. In this work, we apply a shuffling countermeasure to a microcontroller implementation of a neural network to prevent side-channel analysis. The countermeasure is effective while the computational overhead is low. We investigate the extensions necessary for our countermeasure, and how shuffling increases the effort for an attack in theory. In addition, we demonstrate the increase in effort for an attacker through experiments on real side-channel measurements. Based on the mechanism of shuffling and our experimental results, we conclude that an attack on a commonly used neural network with shuffling is no longer feasible in a reasonable amount of time.
Year
DOI
Venue
2022
10.23919/DATE54114.2022.9774710
PROCEEDINGS OF THE 2022 DESIGN, AUTOMATION & TEST IN EUROPE CONFERENCE & EXHIBITION (DATE 2022)
Keywords
DocType
ISSN
neural networks, side-channel analysis, countermeasure, shuffling
Conference
1530-1591
Citations 
PageRank 
References 
0
0.34
0
Authors
3
Name
Order
Citations
PageRank
m brosch100.34
m probst200.34
Georg Sigl344762.13