Fan Yao*

WBP: Training-time Backdoor Attacks through Hardware-based Weight Bit Poisoning

"Training from pre-trained models (PTM) is a popular approach for fast machine learning (ML) service deployment. Recent studies on hardware security have revealed that ML systems could be compromised through flipping bits in model parameters (e.g., weights) with memory faults. In this paper, we intr…