Accessibility to smart devices provides opportunities for side-channel attacks (SCAs) on artificial intelligent (AI) models in the intelligent Internet of Things (IoT). However, the existing literature exposes some shortcomings: 1) incapability of quantifying and analyzing the leaked information through side channels of the intelligent IoT and 2) inability to devise efficient and accurate SCA algorithms. To address these challenges, we propose a side-channel fuzzy analysis-empowered AI model extraction attack in the intelligent IoT. First, the integrated AI model extraction framework is proposed, including power trace-based structure, execution time-based metaparameters, and hierarchical weight extractions. Then, we develop the information theory-based analysis for the AI model extraction via SCA. We derive a mutual information-enabled quantification method, theoretical lower/upper bounds of information leakage, and the minimum number of attack queries to obtain accurate weights. Furthermore, a fuzzy gray correlation-based multiple-microspace parallel SCA algorithm is proposed to extract model weights in the intelligent IoT. Based on the established information-theoretic analysis model, the proposed fuzzy gray correlation-based SCA algorithm obtains high-precision AI weights. Experimental results, consisting of simulation and real-world experiments, verify that the developed analysis method with the information-theoretic perspective is feasible and demonstrate that the designed fuzzy gray correlation-based SCA algorithm is effective for AI model extraction.

中文翻译：

---

智能物联网中信息论视角下基于侧通道模糊分析的AI模型提取攻击


智能设备的可访问性为智能物联网 (IoT) 中的人工智能 (AI) 模型提供了旁道攻击 (SCA) 的机会。然而，现有文献暴露出一些缺点：1）无法量化和分析通过智能物联网侧通道泄露的信息；2）无法设计高效、准确的SCA算法。为了应对这些挑战，我们在智能物联网中提出了一种支持侧通道模糊分析的人工智能模型提取攻击。首先，提出了集成的人工智能模型提取框架，包括基于功率轨迹的结构、基于执行时间的元参数和分层权重提取。然后，我们通过 SCA 开发基于信息论的 AI 模型提取分析。我们推导出一种基于相互信息的量化方法、信息泄漏的理论下限/上限以及获得准确权重的最小攻击查询数。此外，提出了一种基于模糊灰色关联的多微空间并行SCA算法来提取智能物联网中的模型权重。基于建立的信息论分析模型，所提出的基于模糊灰色关联的SCA算法获得了高精度的AI权重。实验结果包括仿真和真实实验，验证了所开发的信息论视角的分析方法的可行性，并证明所设计的基于模糊灰色关联的SCA算法对于AI模型提取是有效的。