The inherent adversarial robustness of analog in-memory computing.

ABSTRACT: A key challenge for deep neural network algorithms is their vulnerability to adversarial attacks. Inherently non-deterministic compute substrates, such as those based on analog in-memory computing, have been speculated to provide significant adversarial robustness when performing deep neural network inference. In this paper, we experimentally validate this conjecture for the first time on an analog in-memory computing chip based on phase change memory devices. We demonstrate higher adversarial robustness against different types of adversarial attacks when implementing an image classification network. Additional robustness is also observed when performing hardware-in-the-loop attacks, for which the attacker is assumed to have full access to the hardware. A careful study of the various noise

SUBMITTER: Lammie C 

PROVIDER: S-EPMC11840121 | biostudies-literature | 2025 Feb

REPOSITORIES: biostudies-literature