Power Analysis of Floating-Point Operations for Leakage Resistance Evaluation of Neural Network Model Parameters

DOI Web Site
  • NOZAKI Hanae
    National Institute of Advanced Industrial Science and Technology (AIST)
  • KOBARA Kazukuni
    National Institute of Advanced Industrial Science and Technology (AIST)

抄録

<p>In the field of machine learning security, as one of the attack surfaces especially for edge devices, the application of side-channel analysis such as correlation power/electromagnetic analysis (CPA/CEMA) is expanding. Aiming to evaluate the leakage resistance of neural network (NN) model parameters, i.e. weights and biases, we conducted a feasibility study of CPA/CEMA on floating-point (FP) operations, which are the basic operations of NNs. This paper proposes approaches to recover weights and biases using CPA/CEMA on multiplication and addition operations, respectively. It is essential to take into account the characteristics of the IEEE 754 representation in order to realize the recovery with high precision and efficiency. We show that CPA/CEMA on FP operations requires different approaches than traditional CPA/CEMA on cryptographic implementations such as the AES.</p>

収録刊行物

キーワード

詳細情報 詳細情報について

問題の指摘

ページトップへ