{"id":"https://openalex.org/W4399396320","doi":"https://doi.org/10.1109/host55342.2024.10545351","title":"One Flip Away from Chaos: Unraveling Single Points of Failure in Quantized DNN s","display_name":"One Flip Away from Chaos: Unraveling Single Points of Failure in Quantized DNN s","publication_year":2024,"publication_date":"2024-05-06","ids":{"openalex":"https://openalex.org/W4399396320","doi":"https://doi.org/10.1109/host55342.2024.10545351"},"language":"en","primary_location":{"id":"doi:10.1109/host55342.2024.10545351","is_oa":false,"landing_page_url":"https://doi.org/10.1109/host55342.2024.10545351","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045682482","display_name":"Cheng Gongye","orcid":"https://orcid.org/0000-0002-6423-0871"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Cheng Gongye","raw_affiliation_strings":["Northeastern University,Department of Electrical & Computer Engineering,Boston,MA"],"affiliations":[{"raw_affiliation_string":"Northeastern University,Department of Electrical & Computer Engineering,Boston,MA","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083131515","display_name":"Yunsi Fei","orcid":"https://orcid.org/0000-0002-9930-0868"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yunsi Fei","raw_affiliation_strings":["Northeastern University,Department of Electrical & Computer Engineering,Boston,MA"],"affiliations":[{"raw_affiliation_string":"Northeastern University,Department of Electrical & Computer Engineering,Boston,MA","institution_ids":["https://openalex.org/I12912129"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5045682482"],"corresponding_institution_ids":["https://openalex.org/I12912129"],"apc_list":null,"apc_paid":null,"fwci":0.7274,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.74206762,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"332","last_page":"342"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9925000071525574,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9921000003814697,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7656185030937195},{"id":"https://openalex.org/keywords/field-programmable-gate-array","display_name":"Field-programmable gate array","score":0.6414019465446472},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5494052171707153},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5261306762695312},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.509432852268219},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.48689666390419006},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.45688942074775696},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.4397934079170227},{"id":"https://openalex.org/keywords/fault-tolerance","display_name":"Fault tolerance","score":0.42211097478866577},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.4195743203163147},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3915836215019226},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.37897565960884094},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.3724985122680664},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.3647819757461548},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.33676886558532715},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2614719867706299},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2536681294441223},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.1878986954689026}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7656185030937195},{"id":"https://openalex.org/C42935608","wikidata":"https://www.wikidata.org/wiki/Q190411","display_name":"Field-programmable gate array","level":2,"score":0.6414019465446472},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5494052171707153},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5261306762695312},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.509432852268219},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.48689666390419006},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.45688942074775696},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.4397934079170227},{"id":"https://openalex.org/C63540848","wikidata":"https://www.wikidata.org/wiki/Q3140932","display_name":"Fault tolerance","level":2,"score":0.42211097478866577},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.4195743203163147},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3915836215019226},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.37897565960884094},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.3724985122680664},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.3647819757461548},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.33676886558532715},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2614719867706299},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2536681294441223},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.1878986954689026},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/host55342.2024.10545351","is_oa":false,"landing_page_url":"https://doi.org/10.1109/host55342.2024.10545351","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.8199999928474426,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G2673579448","display_name":null,"funder_award_id":"CNS-2212010,CNS-1916762,SaTC-1929300","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W2000470949","https://openalex.org/W2038631119","https://openalex.org/W2078668570","https://openalex.org/W2117539524","https://openalex.org/W2194775991","https://openalex.org/W2350778671","https://openalex.org/W2513554817","https://openalex.org/W2981860227","https://openalex.org/W3092454700","https://openalex.org/W3185600290","https://openalex.org/W3187862527","https://openalex.org/W3210158641","https://openalex.org/W3213454114","https://openalex.org/W4200095626","https://openalex.org/W4221148635","https://openalex.org/W4242164861","https://openalex.org/W4287113645","https://openalex.org/W4287118909","https://openalex.org/W4288057800","https://openalex.org/W4297337546","https://openalex.org/W4312596145","https://openalex.org/W6763559720","https://openalex.org/W6775611046","https://openalex.org/W6796815506","https://openalex.org/W6797389900","https://openalex.org/W6810045202"],"related_works":["https://openalex.org/W2120447654","https://openalex.org/W2977179488","https://openalex.org/W2144453115","https://openalex.org/W2128223750","https://openalex.org/W4238532390","https://openalex.org/W2188872161","https://openalex.org/W2961779879","https://openalex.org/W797688974","https://openalex.org/W2002978035","https://openalex.org/W4285818394"],"abstract_inverted_index":{"Deep":[0],"Neural":[1],"Networks":[2],"(DNNs)":[3],"have":[4,40,65,184],"become":[5],"integral":[6],"to":[7,13,49,129,140,221,237,246,266],"security-sensitive":[8],"and":[9,76,137,178,234,254],"mission-critical":[10],"tasks":[11],"due":[12],"their":[14,18],"remarkable":[15],"performance.":[16],"However,":[17],"deployment":[19,175,215],"faces":[20],"various":[21],"security":[22],"risks,":[23],"including":[24],"integrity":[25],"corruption":[26],"by":[27],"fault":[28,267],"attacks":[29],"that":[30,113,182,206,241,258],"disrupt":[31],"computations":[32],"or":[33,219],"tamper":[34],"with":[35],"parameters.":[36],"While":[37],"past":[38],"studies":[39],"primarily":[41],"focused":[42],"on":[43,59,105,155,176,188,202,213],"the":[44,52,80,89,100,120,156,162,167,179,193,208,223,238,272],"vulnerabilities":[45],"of":[46,55,62,79,82,103,119,152,195,225],"DNN":[47,63,84,95,107,126,159,189,211,260,280],"weights":[48],"these":[50],"attacks,":[51],"wider":[53],"implications":[54],"single-bit":[56],"flips":[57],"(SBFs)":[58],"other":[60],"parts":[61],"implementations":[64],"not":[66],"been":[67],"investigated.":[68],"In":[69],"this":[70,196],"research,":[71],"we":[72,97,148,165],"target":[73],"a":[74,106],"comprehensive":[75],"holistic":[77],"analysis":[78,199,250],"robustness":[81],"quantized":[83,210,242,259],"models":[85,233,261],"against":[86],"SBFs.":[87],"Utilizing":[88],"AMD-Xilinx":[90,124,157],"DPU,":[91],"an":[92,114,123,203],"advanced":[93],"FPGA":[94],"accelerator,":[96],"delve":[98],"into":[99],"tangible":[101],"repercussions":[102],"SBFs":[104,183],"hardware":[108,217],"implementation.":[109],"Our":[110,198,269],"results":[111,180],"reveal":[112],"SBF":[115],"in":[116,122,282],"about":[117],"25%":[118],"bits":[121],"DPU":[125,158],"can":[127],"lead":[128],"severe":[130],"consequences,":[131],"ranging":[132],"from":[133],"application":[134],"execution":[135],"failures":[136],"system":[138],"lock-ups":[139],"notable":[141],"inference":[142],"accuracy":[143],"losses.":[144],"Through":[145],"binary":[146],"comparison,":[147],"pinpoint":[149],"single":[150],"points":[151],"failure":[153],"(SPOFs)":[154],"models.":[160],"On":[161],"CPU":[163],"side,":[164],"evaluate":[166],"PyTorch":[168],"TorchScript":[169],"model":[170,212],"format,":[171],"designed":[172],"for":[173,228,275,278],"production":[174],"servers,":[177],"show":[181],"comparable":[185],"detrimental":[186],"effects":[187],"software":[190],"implementations,":[191],"underscoring":[192],"generality":[194],"problem.":[197],"is":[200],"based":[201],"effective":[204],"framework":[205],"runs":[207],"bit-flipped":[209],"real":[214],"platforms,":[216],"accelerators":[218],"CPUs,":[220],"monitor":[222],"consequences":[224],"SBFs,":[226],"allowing":[227],"broad":[229],"assessment":[230],"across":[231],"diverse":[232],"datasets.":[235],"Contrary":[236],"prevailing":[239],"belief":[240],"DNNs":[243],"are":[244,262],"resilient":[245],"bit-flips,":[247],"our":[248],"systematic":[249],"offers":[251],"new":[252],"insights":[253],"finds":[255],"SPOFs,":[256],"showing":[257],"actually":[263],"very":[264],"vulnerable":[265],"attacks.":[268],"work":[270],"stresses":[271],"pressing":[273],"need":[274],"protection":[276],"strategies":[277],"robust":[279],"inferences":[281],"critical":[283],"applications.":[284]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}