{"id":"https://openalex.org/W4404133548","doi":"https://doi.org/10.1145/3649329.3656222","title":"DNN-Defender: A Victim-Focused In-DRAM Defense Mechanism for Taming Adversarial Weight Attack on DNNs","display_name":"DNN-Defender: A Victim-Focused In-DRAM Defense Mechanism for Taming Adversarial Weight Attack on DNNs","publication_year":2024,"publication_date":"2024-06-23","ids":{"openalex":"https://openalex.org/W4404133548","doi":"https://doi.org/10.1145/3649329.3656222"},"language":"en","primary_location":{"id":"doi:10.1145/3649329.3656222","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649329.3656222","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 61st ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3649329.3656222","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5036434056","display_name":"Ranyang Zhou","orcid":"https://orcid.org/0009-0000-9932-1733"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ranyang Zhou","raw_affiliation_strings":["New Jersey Institute of Technology, Newark, NJ, United States"],"raw_orcid":"https://orcid.org/0009-0000-9932-1733","affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology, Newark, NJ, United States","institution_ids":["https://openalex.org/I118118575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101726098","display_name":"Sabbir Ahmed","orcid":"https://orcid.org/0000-0001-5684-2731"},"institutions":[{"id":"https://openalex.org/I123946342","display_name":"Binghamton University","ror":"https://ror.org/008rmbt77","country_code":"US","type":"education","lineage":["https://openalex.org/I123946342"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sabbir Ahmed","raw_affiliation_strings":["State University of New York at Binghamton, Binghamton, NY, United States"],"raw_orcid":"https://orcid.org/0000-0001-5684-2731","affiliations":[{"raw_affiliation_string":"State University of New York at Binghamton, Binghamton, NY, United States","institution_ids":["https://openalex.org/I123946342"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030138469","display_name":"Adnan Siraj Rakin","orcid":"https://orcid.org/0000-0002-6056-2625"},"institutions":[{"id":"https://openalex.org/I123946342","display_name":"Binghamton University","ror":"https://ror.org/008rmbt77","country_code":"US","type":"education","lineage":["https://openalex.org/I123946342"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Adnan Siraj Rakin","raw_affiliation_strings":["State University of New York at Binghamton, Binghamton, NY, United States"],"raw_orcid":"https://orcid.org/0000-0002-6056-2625","affiliations":[{"raw_affiliation_string":"State University of New York at Binghamton, Binghamton, NY, United States","institution_ids":["https://openalex.org/I123946342"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051680668","display_name":"Shaahin Angizi","orcid":"https://orcid.org/0000-0003-2289-6381"},"institutions":[{"id":"https://openalex.org/I118118575","display_name":"New Jersey Institute of Technology","ror":"https://ror.org/05e74xb87","country_code":"US","type":"education","lineage":["https://openalex.org/I118118575"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shaahin Angizi","raw_affiliation_strings":["New Jersey Institute of Technology, Newark, NJ, United States"],"raw_orcid":"https://orcid.org/0000-0003-2289-6381","affiliations":[{"raw_affiliation_string":"New Jersey Institute of Technology, Newark, NJ, United States","institution_ids":["https://openalex.org/I118118575"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8542,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.84991068,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/dram","display_name":"Dram","score":0.914972186088562},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7778924703598022},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6836690902709961},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5683081746101379},{"id":"https://openalex.org/keywords/mechanism","display_name":"Mechanism (biology)","score":0.5280935168266296},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.24683871865272522},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.13344287872314453}],"concepts":[{"id":"https://openalex.org/C7366592","wikidata":"https://www.wikidata.org/wiki/Q1255620","display_name":"Dram","level":2,"score":0.914972186088562},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7778924703598022},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6836690902709961},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5683081746101379},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.5280935168266296},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.24683871865272522},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.13344287872314453},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3649329.3656222","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649329.3656222","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 61st ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3649329.3656222","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649329.3656222","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 61st ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/5","score":0.6399999856948853,"display_name":"Gender equality"}],"awards":[{"id":"https://openalex.org/G1466421266","display_name":"CNS Core: Small: Toward Opportunistic, Fast, and Robust In-Cache AI Acceleration at the Edge","funder_award_id":"2228028","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W2147657366","https://openalex.org/W2157116240","https://openalex.org/W2170257519","https://openalex.org/W2525431465","https://openalex.org/W2766489088","https://openalex.org/W2949951157","https://openalex.org/W2981860227","https://openalex.org/W3034665124","https://openalex.org/W3042829099","https://openalex.org/W3092411122","https://openalex.org/W3105648728","https://openalex.org/W3199792160","https://openalex.org/W4214481814","https://openalex.org/W4281916312","https://openalex.org/W4288057800","https://openalex.org/W4299301436","https://openalex.org/W4312606042","https://openalex.org/W4360831792","https://openalex.org/W4379116013"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2502115930","https://openalex.org/W3120961607","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585"],"abstract_inverted_index":{"With":[0],"deep":[1],"learning":[2,9],"deployed":[3],"in":[4,35],"many":[5],"security-sensitive":[6],"areas,":[7],"machine":[8],"security":[10],"is":[11],"becoming":[12],"progressively":[13],"important.":[14],"Recent":[15],"studies":[16],"demonstrate":[17],"attackers":[18],"can":[19,125],"exploit":[20],"system-level":[21],"techniques":[22],"exploiting":[23],"the":[24,64,77,90,104,111,133,146],"RowHammer":[25,137],"vulnerability":[26],"of":[27,106,130,135],"DRAM":[28],"to":[29,42,109,139],"deterministically":[30],"and":[31,75,82,155],"precisely":[32],"flip":[33],"bits":[34],"Deep":[36],"Neural":[37],"Networks":[38],"(DNN)":[39],"model":[40],"weights":[41],"affect":[43],"inference":[44],"accuracy.":[45],"The":[46],"existing":[47],"defense":[48,94,148],"mechanisms":[49,70],"are":[50],"software-based,":[51],"such":[52],"as":[53],"weight":[54],"reconstruction":[55],"requiring":[56,159],"expensive":[57,72],"training":[58,162],"overhead":[59],"or":[60,163],"performance":[61,134],"degradation.":[62],"On":[63],"other":[65],"hand,":[66],"generic":[67],"hardware-based":[68],"victim-/aggressor-focused":[69],"impose":[71],"hardware":[73,165],"overheads":[74],"preserve":[76],"spatial":[78],"connection":[79],"between":[80],"victim":[81],"aggressor":[83],"rows.":[84],"In":[85,144],"this":[86],"paper,":[87],"we":[88],"present":[89],"first":[91],"DRAM-based":[92],"victim-focused":[93],"mechanism":[95],"tailored":[96],"for":[97],"quantized":[98],"DNNs,":[99],"named":[100],"DNN-Defender":[101,124],"that":[102,123],"leverages":[103],"potential":[105],"in-DRAM":[107],"swapping":[108],"withstand":[110],"targeted":[112,136],"bit-flip":[113],"attacks":[114,138],"with":[115],"a":[116,127,140],"priority":[117],"protection":[118,131],"mechanism.":[119],"Our":[120],"results":[121],"indicate":[122],"deliver":[126],"high":[128],"level":[129],"downgrading":[132],"random":[141],"attack":[142],"level.":[143],"addition,":[145],"proposed":[147],"has":[149],"no":[150],"accuracy":[151],"drop":[152],"on":[153],"CIFAR-10":[154],"ImageNet":[156],"datasets":[157],"without":[158],"any":[160],"software":[161],"incurring":[164],"overhead.":[166]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}