Close

Presentation

SeDA: Secure and Efficient DNN Accelerators with Hardware/Software Synergy
DescriptionEnsuring the confidentiality and integrity of DNN accelerators is paramount across various scenarios spanning autonomous driving, healthcare, and finance. However, current security approaches typically require extensive hardware resources, and incur significant off-chip memory access overheads. This paper introduces SeDA, which utilizes 1) a bandwidth-aware encryption mechanism to improve hardware resource efficiency, 2) optimal block granularity through intra-layer and inter-layer tiling patterns, and 3) a multi-level integrity verification mechanism that minimizes, or even eliminates, memory access overheads. Experimental results show that SeDA reduces performance overhead by 12.26% and 12.29% on server and edge NPUs, respectively, while also providing robust scalability.