Rowhammer-Based Trojan Injection: One Bit Flip Is Sufficient...
summary
Claims a practical one-bit flip Rowhammer backdoor that works on full-precision models by flipping one exponent bit in the classification layer, finding weights whose exponent bit change promotes a target class, and optimizing a small L1-constrained trigger to activate that weight. Evaluated on CIFAR-10, CIFAR-100, GTSRB and ImageNet (including a vision transformer), it reports up to 99.9% attack success (99.6% average) with benign accuracy loss as low as 0.005% (0.06% average) and resists existing defenses.
AI-written summary · about
related talks
34mLeapFrog: The Rowhammer Instruction Skip Attack
38mCSI:Rowhammer: Closing the Case of Half-Double and Beyond
40mRowhammer Attacks: A Walkthrough Guide
25mOne Bit Flips, One Cloud Flops: Cross-VM Row Hammer Attacks...
28mFlip Feng Shui: Hammering a Needle in the Software Stack
45mKeynote: How to Build Hardware Trojans
29mCAn’t Touch This...
18mSoftTRR: Protect Page Tables against Rowhammer Attacks using Software-only...