no code implementations • 14 Dec 2020 • Andrew Boutros, Mathew Hall, Nicolas Papernot, Vaughn Betz
We find that even when using the strongest attacker circuit, the prediction accuracy of the DL accelerator is not compromised when running at its safe operating frequency.