针对传感AI的能耗延迟攻击首次被系统研究,模型剪枝可有效防御。
Sponge Attacks on Sensing AI: Energy-Latency Vulnerabilities and Defense via Model Pruning
- 提出针对传感AI的能耗延迟海绵攻击,以可穿戴设备为案例
- 攻击使能耗飙升、推理延迟增加,加速电池耗尽
- 模型剪枝能增强抗攻击能力,适合资源受限的物联网场景
近期研究显示,海绵攻击可显著增加深度神经网络(DNN)的能耗和推理延迟。然而,先前工作主要聚焦于计算机视觉与自然语言处理任务,忽视了轻量级AI模型在资源受限设备(如物联网环境)中日益增长的应用。此类攻击对电池容量有限且需实时响应的系统构成严重威胁。本文做出两项关键贡献:首先,我们首次系统性探索针对传感类AI模型的能耗-延迟海绵攻击。以可穿戴传感AI为例,证明海绵攻击可大幅降低性能,导致能耗上升、电池更快耗尽,并延长推理延迟。其次,为缓解此类攻击,我们研究了模型剪枝这一广泛应用于资源受限AI的压缩技术作为潜在防御手段。实验表明,剪枝带来的稀疏性显著提升模型对海绵攻击的鲁棒性。我们还量化了模型效率与抗攻击能力之间的权衡,揭示了在物联网环境中部署传感类AI时模型压缩的安全影响。
原文摘要 · Abstract (English)
Recent studies have shown that sponge attacks can significantly increase the energy consumption and inference latency of deep neural networks (DNNs). However, prior work has focused primarily on computer vision and natural language processing tasks, overlooking the growing use of lightweight AI models in sensing-based applications on resource-constrained devices, such as those in Internet of Things (IoT) environments. These attacks pose serious threats of energy depletion and latency degradation in systems where limited battery capacity and real-time responsiveness are critical for reliable operation. This paper makes two key contributions. First, we present the first systematic exploration of energy-latency sponge attacks targeting sensing-based AI models. Using wearable sensing-based AI as a case study, we demonstrate that sponge attacks can substantially degrade performance by increasing energy consumption, leading to faster battery drain, and by prolonging inference latency. Second, to mitigate such attacks, we investigate model pruning, a widely adopted compression technique for resource-constrained AI, as a potential defense. Our experiments show that pruning-induced sparsity significantly improves model resilience against sponge poisoning. We also quantify the trade-offs between model efficiency and attack resilience, offering insights into the security implications of model compression in sensing-based AI systems deployed in IoT environments.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。