Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Mitigating Adversarial Attack for Compute-in-Memory Accelerator
  Utilizing On-chip Finetune   Compute-in-memory (CIM) has been proposed to accelerate the convolution
neural network (CNN) computation by implementing parallel multiply and
accumulation in analog domain. However, the subsequent processing is still
preferred to be performed in digital domain. This makes the analog to digital
converter (ADC) critical in CIM architectures. One drawback is the ADC error
introduced by process variation. While research efforts are being made to
improve ADC design to reduce the offset, we find that the accuracy loss
introduced by the ADC error could be recovered by model weight finetune. In
addition to compensate ADC offset, on-chip weight finetune could be leveraged
to provide additional protection for adversarial attack that aims to fool the
inference engine with manipulated input samples. Our evaluation results show
that by adapting the model weights to the specific ADC offset pattern to each
chip, the transferability of the adversarial attack is suppressed. For a chip
being attacked by the C&W method, the classification for CIFAR-10 dataset will
drop to almost 0%. However, when applying the similarly generated adversarial
examples to other chips, the accuracy could still maintain more than 62% and
85% accuracy for VGG-8 and DenseNet-40, respectively.

5
The categories of this paper are: gr-qc
21
The categories of this paper are: adap-org
27
The categories of this paper are: comp-gas
30
The categories of this paper are: q-alg
17
The categories of this paper are: q-fin
11
The categories of this paper are: hep-lat
20
The categories of this paper are: acc-phys
24
The categories of this paper are: dg-ga
18
The categories of this paper are: econ
29
The categories of this paper are: funct-an
12
The categories of this paper are: nucl-th
31
The categories of this paper are: ao-sci
6
The categories of this paper are: astro-ph
25
The categories of this paper are: patt-sol
22
The categories of this paper are: chao-dyn
16
The categories of this paper are: stat