arrow
返回

DefQ: Defensive Quantization Against Inference Slow-Down Attack for Edge Computing

delete2023-02-15
delete2
PRE
AI
邱寒 封面图
邱寒 (Han Qiu)
T
Tianwei Zhang
张
张天柱 (Tianzhu Zhang)
H
Hongyu Li
M
Meikang Qiu *
DOI:10.1109/JIOT.2021.3138935delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
The novel multiexit deep neural network (DNN) architectures provide a new optimization solution for efficient model inference in edge systems. Inference of most samples can be completed within the first few layers on an edge device without the need to transmit them to a remote server. This can significantly increase the inference speed and system throughput, which is particularly beneficial to the resource-constrained scenarios. Unfortunately, researchers proposed an inference slow-down attack against this technique, where an external adversary can add imperceptible perturbations on clean samples to invalidate the multiexit mechanism. In this article, we propose a defensive quantization (DefQ) method as the first defense against the inference slow-down attack. It is designed to be lightweight and can be easily implemented in off-the-shelf camera sensors. Particularly, DefQ introduces a novel quantization operation to preprocess the input images. It is capable of removing the perturbations from the malicious samples and preserving the correct inference exit points and prediction accuracy. Meanwhile, it has little impact on the clean samples. Extensive evaluations show that DefQ can effectively defeat the inference slow-down attack and well protect the efficiency of edge systems.
Keyword:
Computational modeling
Servers
Task analysis
Sensors
Quantization (signal)
Sensor systems
Predictive models
Deep learning (DL)
edge computing
inference slow-down
security

期刊

IEEE Internet of Things Journal 封面图
IEEE Internet of Things Journal
IF:
8.9
论文数:
1.4W
被引数:
7.8W

机构

B
beijing university of posts & telecommunications
学者数:
1.4W
论文数: 1.2W
被引数: 9
T
tsinghua university
学者数:
11.9W
论文数: 10.0W
被引数: 137
N
Nanyang Technological University
学者数:
4.9W
论文数: 4.8W
被引数: 8.1W
T
Texas A&M University System
学者数:
4.4W
论文数: 4.0W
被引数: 4.0K
N
nokia corporation
学者数:
1.8K
论文数: 1.5K
被引数: 1
学者 查看更多机构
引用论文

引用论文

Compressing Deep Model With Pruning and Tucker Decomposition for Smart Embedded Systems
err2022-08-15
err18
PREAI
errDai, Cheng; Liu, Xingang; Cheng, Hongqiang; Yang, Laurence T.; Deen, M. Jamal
err分享
err收藏
Different patterns of cortical activity in females and males during spatial long-term memory
err2019-10-01
err0
PREAI
errDylan S. Spets; Brittany M. Jeye; Scott D. Slotnick
err分享
err收藏
Requirement for tumor suppressor Apc in the morphogenesis of anterior and ventral mouse embryo
err2003-01-01
err0
errOAAI
errTomo-o Ishikawa; Yoshitaka Tamai; Qin Li; Masanobu Oshima; Makoto M Taketo
err分享
err收藏
err分享
err收藏
学者 查看更多内容