Search for: All records

Machine learning (ML) models can be trade secrets due to their development cost. Hence, they need protection against malicious forms of reverse engineering (e.g., in IP piracy). With a growing shift of ML to the edge devices, in part for performance and in part for privacy benefits, the models have become susceptible to the so-called physical side-channel attacks. ML being a relatively new target compared to cryptography poses the problem of side-channel analysis in a context that lacks published literature. The gap between the burgeoning edge-based ML devices and the research on adequate defenses to provide side-channel security for them thus motivates our study. Our work develops and combines different flavors of side-channel defenses for ML models in the hardware blocks. We propose and optimize the first defense based on Boolean masking . We first implement all the masked hardware blocks. We then present an adder optimization to reduce the area and latency overheads. Finally, we couple it with a shuffle-based defense. We quantify that the area-delay overhead of masking ranges from 5.4× to 4.7× depending on the adder topology used and demonstrate a first-order side-channel security of millions of power traces. Additionally, the shuffle countermeasure impedes a straightforward second-order attack on our first-order masked implementation. 

Particle charging in the afterglows of non-thermal plasmas typically take place in a non-neutral space charge environment. We model the same by incorporating particle-ion collision rate constant models, developed in prior work by analyzing particle-ion trajectories calculated using Langevin Dynamics simulations, into species transport equations for ions, electrons and charged particles in the afterglow. A scaling analysis of particle charging and additional Langevin Dynamics calculations of the particle-ion collision rate constant are presented to extend the range of applicability to ion electrostatic to thermal energy ratios of 300 and diffusive Knudsen number (that scales inversely with gas pressure) up to 2000. The developed collision rate constant models are first validated by comparing predictions of particle charge against measured values in a stationary, non-thermal DC plasma from past PK-4 campaigns published in Phys. Rev. Lett. 93(8): 085001 and Phys. Rev. E 72(1): 016406). The comparisons reveal excellent agreement within ±35% for particles of radius 0.6,1.0,1.3 μm in the gas pressure range of ~20-150 Pa. The experiments to probe particle charge distributions by Sharma et al. (J. Physics D: Appl. Phys. 53(24): 245204) are modeled using the validated particle-ion collision rate constant models and the calculated charge fractions are compared with measurements. The comparisons reveal that the ion/electron concentration and gas temperature in the afterglow critically influence the particle charge and the predictions are generally in qualitative agreement with the measurements. Along with critical assessment of the modeling assumptions, several recommendations are presented for future experimental design to probe charging in afterglows. 

The Langevin Dynamics (LD) method (also known in the literature as Brownian Dynamics) is routinely used to simulate aerosol particle trajectories for transport rate constant calculations as well as to understand aerosol particle transport in internal and external fluid flows. This tutorial intends to explain the methodological details of setting up a LD simulation of a population of aerosol particles and to deduce rate constants from an ensemble of classical trajectories. We discuss the applicability and limitations of the translational Langevin equation to model the combined stochastic and deterministic motion of particles in fields of force or fluid flow. The drag force and stochastic “diffusion” force terms that appear in the Langevin equation are discussed elaborately, along with a summary of common forces relevant to aerosol systems (electrostatic, gravity, van der Waals, …); a commonly used first order and a fourth order Runge-Kutta time stepping schemes for linear stochastic ordinary differential equations are presented. A MATLAB® implementation of a LD code for simulating particle settling under gravity using the first order scheme is included for illustration. Scaling analysis of aerosol transport processes and the selection of timestep and domain size for trajectory simulations are demonstrated through two specific aerosol processes: particle diffusion charging and coagulation. Fortran® implementations of the first order and fourth order time-stepping schemes are included for simulating the 3D motion of a particle in a periodic domain. Potential applications and caveats to the usage of LD are included as a summary.