不太可能的英雄：模拟光子神经网络作为内置对抗防御者的非理想性.pdf

1、The Unlikely Hero:Nonideality in Analog Photonic Neural Networks as Built-in Defender Against Adversarial Attacks1Haotian Lu,Ziang Yin,Partho Bhoumik,Sanmitra Banerjee,Krishnendu Chakrabarty,Jiaqi Gu1Arizona State UniversitySchool of Electrical,Computer and Energy Engineeringjiaqiguasu.edu|scopex-as

2、u.github.ioMarch 7,2025Photonic ML Accelerators2Evolve from electronics to heterogenous electronics-photonicsSource:Mitchell A.Nahmias,Bhavin J.Shastri,Alexander N.Tait,Thomas Ferreira de Lima and Paul R.Prucnal,“Neuromorphic photonics,”Optics&Photonics News,Jan 2018.Optical-electronic hybrid chips(

3、10 TOPS/W)Fully-optical chipsNeuromorphic photonics(1E6 TOPS/W)Energy Efficiency(TOPS/W)Compute Density(TOPS/mm2)Speed-of-light,Massive parallelism,low-powerpotential105Photonic AI System is Booming3Photonic Neural Network Trends in AcademiaSciRep17Nat.Photon17ASP-DAC20DATE20Nature19ASP-DAC19DATE21A

4、PR20Nature21HPCA20PhysRev19Nature21Nat.Comm.22Nat.Comm.22Science24Nanophotonics24Photonic Computing Chip+Optical InterconnectsFoundry/EPDA Support in IndustryElectronic-Photonic Design Automation ToolsPDK/Tape-out/HI/E-O Co-Packaging SupportGaps in Electronic-Photonic AI Eco-systems4EPIC AI ecosyste

5、m is in early stage,many new challengesReliabilityVariations+AttacksAccuracy loss95%60%Area/E-O Cost40200 2Large spatial footprintE-O/A-D conversion01010 01011 E-OO-EReconfigurabilityLack of versatilityfor diverse workloadsLow precision in encodingPrecision?Our concern in this paper Reliability is S

6、everely Challenged by Attack5Security problem is under-explored for AMS photonic AI hardwareSerious reliability concerns with two enemies?Malicious attack Hardware non-ideality+Bit-flip Attack in Photonic AI Hardware6Bit-flip(PBFA)Rakin+,ICCV19 poses great threat to Photonic AI HWWhite-box attack,ar