A fault-injection attacker who can flip individual bits of those integers (the Rowhammer-style threat) does not need many flips to ruin a large image classifier: the Bit-Flip Attack paper showed ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results