Logo image
Back
Preserving Privacy of Neuromorphic Hardware From PCIe Congestion Side-Channel Attack
Conference proceeding

Preserving Privacy of Neuromorphic Hardware From PCIe Congestion Side-Channel Attack

Anup Das
2023 IEEE 47th Annual Computers, Software, and Applications Conference (COMPSAC), pp 689-698
Jun 2023
DOI: https://doi.org/10.1109/COMPSAC57700.2023.00094

Abstract

Computational modeling Machine learning Measurement Neuromorphic Computing Neuromorphics PCIe Privacy Scratchpad Side-Channel Attack Side-channel attacks Software Spiking Neural Network (SNN)
Neuromorphic systems are equipped with software-managed scratchpad to cache intermediate results and synaptic weights of a machine learning model. PCIe (Peripheral Component Interconnect Express) is the de facto protocol to interface between scratchpad and main memory. Congestion happens when PCIe traffic overwhelms the PCIe link capacity. This introduces transmission delay, which not only impacts model performance but also leaks sensitive information about a user (the victim).In this paper, we show that inefficient data placement in scratchpad using state-of-the-art compilers may trigger significant data movement over PCIe. An attacker can measure the PCIe congestion to indirectly infer the victim's model. Therefore, the delay from PCIe congestion can be exploited as a side-channel.We propose a compiler extension to intelligently manage scratchpad in order to improve model privacy. First, we formulate a design metric to assess the vulnerability of a model to PCIe congestion side-channel attack. Next, we propose an optimization strategy integrated within the compiler to identify contents that should be retained inside scratchpad to minimize this design metric. Finally, we propose a Hill Climbing heuristic to allocate model operations to neuromorphic tiles and improve privacy by efficiently utilizing their on-chip scratchpad capacity.We evaluate our privacy-preserving model execution (PrivacyX) to mitigate PCIe congestion side-channel attack using one attack scenario and 16 image, object, and language-based machine learning models. We show that PrivacyX significantly reduces the vulnerability of a model to PCIe congestion side-channel attack compared to baseline compilers. We also show that PrivacyX, which is managed entirely in software, is complementary to several hardware-based privacy preserving solutions.

Metrics

12 Record Views
2 citations in Web of Science
2 citations in Scopus

Details

InCites Highlights

Data related to this publication, from InCites Benchmarking & Analytics tool:

Web of Science research areas
Computer Science, Interdisciplinary Applications
Computer Science, Software Engineering
Logo image