BDFA: A Blind Data Adversarial Bit-flip Attack on Deep Neural Networks

Behnam Ghavami, Mani Sadati, Mohammad Shahidzadeh +2

Adversarial bit-flip attack (BFA) on Neural Network weights can result in catastrophic accuracy degradation by flipping a very small number of bits. A major drawback of prior bit f…