Nonideality-aware training makes memristive networks more robust to adversarial attacks
File(s)016111_1_5.0241202.pdf (4.39 MB)
Published version
Author(s)
Joksas, Dovydas
Muñoz-González, Luis
Lupu, Emil
Mehonic, Adnan
Type
Journal Article
Abstract
Neural networks are now deployed in a wide number of areas, from object classification to natural language systems. Implementations using analog devices such as memristors promise better power efficiency, potentially bringing these applications to a greater number of environments. However, such systems suffer from more frequent device faults, and overall, their exposure to adversarial attacks has not been studied extensively. In this work, we investigate how nonideality-aware training—a common technique to deal with physical nonidealities—affects adversarial robustness. We find that adversarial robustness is significantly improved, even with limited knowledge of what nonidealities will be encountered during test time.
Date Issued
2025-03-01
Date Acceptance
2025-01-22
Citation
APL Machine Learning, 2025, 3 (1)
ISSN
2770-9019
Publisher
AIP Publishing
Journal / Book Title
APL Machine Learning
Volume
3
Issue
1
Copyright Statement
© 2025 Author(s). All article content, except where otherwise noted, is licensed under a Creative Commons Attribution (CC BY) license (https://creativecommons.org/licenses/by/4.0/).
License URL
Identifier
10.1063/5.0241202
Publication Status
Published
Article Number
ARTN 016111
Date Publish Online
2025-02-11