China Information Technology Security Evaluation Center

CritiFlip: an efficient bit-flip attack based on critical weight identification

Abstract Recent studies have demonstrated that deep neural networks (DNNs) are highly vulnerable to bit-flip attacks (BFAs), where modifying only a few bits in memory can severely degrade model performance. However, existing BFA techniques typically rely on exhaustive searches ov...