Survival of the Cheapest: Cost-Aware Hardware Adaptation for Adversarial Robustness
Not on the map. Why?
Abstract (arXiv)
Deploying adversarially robust machine learning systems requires continuous trade-offs between robustness, cost, and latency. We present an autonomic decision-support framework providing a quantitative foundation for adaptive hardware selection and hyper-parameter tuning in cloud-native deep learning. The framework applies accelerated failure time (AFT) models to quantify the effect of hardware choice, batch size, epochs, and validation accuracy on model survival time. This framework can be naturally integrated into an autonomic control loop (monitor--analyse--plan--execute, MAPE-K), where system metrics such as cost, robustness, and latency are continuously evaluated and used to adapt model configurations and hardware selection. Experiments across three GPU architectures confirm the framework is both sound and cost-effective: the Nvidia L4 yields a 20% increase in adversarial survival time while costing 75% less than the V100, demonstrating that expensive hardware does not necessarily improve robustness. The analysis further reveals that model inference latency is a stronger predictor of adversarial robustness than training time or hardware configuration.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 28 of its 72 references that are in the map. First posted on arXiv 11 Sep 2024.
Builds on
28 of 72 references.
References · 28
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2019Optuna: A Next-generation Hyperparameter Optimization Frameworkcited by 2,455
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
- 2016End to End Learning for Self-Driving Carscited by 1,000
- 2017Revisiting Unreasonable Effectiveness of Data in Deep Learning Eracited by 916
- 2017Evasion Attacks against Machine Learning at Test Timecited by 686
- 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 484
16 more
- 2020Label-Only Membership Inference Attackscited by 371
- 2019Hidden Trigger Backdoor Attackscited by 359
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 328
- 2018Knockoff Nets: Stealing Functionality of Black-Box Modelscited by 285
- 2018Adversarial Attacks and Defences: A Surveycited by 259
- 2018Adversarial Robustness Toolbox v1.0.0cited by 214
- 2024An Empirical Study of Mamba-based Language Modelscited by 177
- 2020Membership Leakage in Label-Only Exposurescited by 156
- 2023Tree-Structured Parzen Estimator: Understanding Its Algorithm Components and Their Roles for Better Empirical Performancecited by 143
- 2020Dos and Don'ts of Machine Learning in Computer Securitycited by 98
- 2018The History Began from AlexNet: A Comprehensive Survey on Deep Learning Approachescited by 74
- 2021Compute and Energy Consumption Trends in Deep Learning Inferencecited by 61
- 2019Exploring the Hyperparameter Landscape of Adversarial Robustnesscited by 4
- 2021Benchmarking the Nvidia GPU Lineage: From Early K80 to Modern A100 with Asynchronous Memory Transferscited by 4
- 2021A critical look at the current train/test split in machine learningcited by 3
- 2024Reusable MLOps: Reusable Deployment, Reusable Infrastructure and Hot-Swappable Machine Learning models and servicescited by 2
Built on by
Not cited yet.