On-Chip Monitors Detect Bit-Flip Attacks in AI Accelerators (UF, UT Dallas, RPI)
On-Chip Monitors Detect Bit-Flip Attacks in AI Accelerators (UF, UT Dallas, RPI)
A research team from the University of Florida, the University of Texas at Dallas and Rensselaer Polytechnic Institute published a paper, BARE-AI, proposing a runtime framework that detects, localizes and mitigates bit-flip attacks (BFA) during AI inference. The scheme uses built-in performance monitors to protect deep neural networks, avoiding the high hardware overhead, retraining dependence and limited targeting resistance of existing defenses.
Researchers at the University of Florida, University of Texas at Dallas, and Rensselaer Polytechnic Institute published a technical paper titled “BARE-AI: Bit-Flip Attack Resilience in AI Hardware through Built-in Performance Monitors.”
Abstract Excerpt:
“Deep Neural Networks (DNNs) are integral to many safety critical systems, yet they remain highly vulnerable to bit-flip attacks (BFAs), where a few memory level perturbations can drastically degrade accuracy. Existing defenses incur significant hardware overhead, depend on retraining, or fail against targeted flips. We propose BARE-AI, a runtime framework that detects, localizes, and mitigates BFAs during AI inference.”
Find the technical paper here. October 2026.
Rahaman, Habibur, Swastik Bhattacharya, Sanjay Das, Kanad Basu, and Swarup Bhunia. “BARE-AI: Bit-Flip Attack Resilience in AI Hardware through Built-in Performance Monitors.” arXiv preprint arXiv:2610.08739 (2026).
Source: Semiconductor Engineering Chips and Packaging · semiengineering.com