PrometheusFree: Concurrent Detection of Laser Fault Injection Attacks in Optical Neural Networks

TL;DR

PrometheusFree is a novel optical neural network framework that detects laser fault injection attacks concurrently, using wavelength-dependent techniques to significantly reduce attack success rates and improve security in photonic AI accelerators.

Contribution

This work introduces PrometheusFree, the first framework for concurrent laser fault attack detection in optical neural networks, utilizing Wavelength Division Perturbation to enhance detection accuracy.

Findings

Achieves over 96% attack misprediction recall.

Reduces attack success rate by 38.6% with WDP technique.

Limits attack success ratio to 0.019, a 95.3% reduction.

Abstract

Silicon Photonics-based AI Accelerators (SPAAs) have been considered as promising AI accelerators achieving high energy efficiency and low latency. While many researchers focus on improving SPAAs' energy efficiency and latency, their physical security has only recently received attention. While it is essential to deliver strong optical neural network inferencing approaches, their success and adoption are predicated on their ability to deliver a secure execution environment. Towards this end, this paper proposes PrometheusFree, an optical neural network framework that is capable of concurrent detection of laser fault injection attacks. This paper first presents an illustrative threat of laser fault injection attacks on SPAAs, capable of subjecting the optical neural network to misclassifications. The threat then is addressed in this paper by developing techniques for concurrent detection of the laser fault injection attacks. Furthermore, this paper introduces a novel application of Wavelength Division Perturbation (WDP) technique where wavelength-dependent Vector Matrix Multiplication (VMM) results are utilized to boost fault attack detection accuracy. Simulation results show that PrometheusFree achieves over 96% attack-caused misprediction recall as the use of the WDP technique squashes the attack success rate by 38.6% on average. Compared with prior art, PrometheusFree limits the average attack success ratio to 0.019, yielding a 95.3% reduction. The experimental results confirm the superiority of the concurrent detection and the boost in attack detection abilities imparted by the WDP approaches.