Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Hardware Trojan Attacks on Neural Networks   With the rising popularity of machine learning and the ever increasing demand
for computational power, there is a growing need for hardware optimized
implementations of neural networks and other machine learning models. As the
technology evolves, it is also plausible that machine learning or artificial
intelligence will soon become consumer electronic products and military
equipment, in the form of well-trained models. Unfortunately, the modern
fabless business model of manufacturing hardware, while economic, leads to
deficiencies in security through the supply chain. In this paper, we illuminate
these security issues by introducing hardware Trojan attacks on neural
networks, expanding the current taxonomy of neural network security to
incorporate attacks of this nature. To aid in this, we develop a novel
framework for inserting malicious hardware Trojans in the implementation of a
neural network classifier. We evaluate the capabilities of the adversary in
this setting by implementing the attack algorithm on convolutional neural
networks while controlling a variety of parameters available to the adversary.
Our experimental results show that the proposed algorithm could effectively
classify a selected input trigger as a specified class on the MNIST dataset by
injecting hardware Trojans into $0.03\%$, on average, of neurons in the 5th
hidden layer of arbitrary 7-layer convolutional neural networks, while
undetectable under the test data. Finally, we discuss the potential defenses to
protect neural networks against hardware Trojan attacks.

23
The categories of this paper are: solv-int
9
The categories of this paper are: nlin
30
The categories of this paper are: q-alg
21
The categories of this paper are: adap-org
4
The categories of this paper are: cond-mat
35
The categories of this paper are: mtrl-th
33
The categories of this paper are: plasm-ph
11
The categories of this paper are: hep-lat
10
The categories of this paper are: q-bio
28
The categories of this paper are: alg-geom
26
The categories of this paper are: bayes-an
34
The categories of this paper are: chem-ph
36
The categories of this paper are: cmp-lg
31
The categories of this paper are: ao-sci
17
The categories of this paper are: q-fin
22
The categories of this paper are: chao-dyn