Security of Split-Deployed DNNs in IoT Edge Computing: A Structure-Aware Universal Adversarial Attack
A structure-aware universal adversarial perturbation (SA-UAP) that leverages the spectral properties of the exposed linear operators in the edge-side subnetwork and is optimized to align with dominant singular directions of the accessible layers, thereby maximizing perturbation amplification through the front-end featu...