mlsanityData to 14 Oct 2026

Energy-Latency Attacks: A New Adversarial Threat to Deep Learning

arXiv 2503.04963 ↗First posted 6 Mar 2025cs.CR cs.AIcited by 5

Not on the map. Why?

Abstract (arXiv)

The growing computational demand for deep neural networks ( DNNs) has raised concerns about their energy consumption and carbon footprint, particularly as the size and complexity of the models continue to increase. To address these challenges, energy-efficient hardware and custom accelerators have become essential. Additionally, adaptable DNN s are being developed to dynamically balance performance and efficiency. The use of these strategies became more common to enable sustainable AI deployment. However, these efficiency-focused designs may also introduce vulnerabilities, as attackers can potentially exploit them to increase latency and energy usage by triggering their worst-case-performance scenarios. This new type of attack, called energy-latency attacks, has recently gained significant research attention, focusing on the vulnerability of DNN s to this emerging attack paradigm, which can trigger denial-of-service ( DoS) attacks. This paper provides a comprehensive overview of current research on energy-latency attacks, categorizing them using the established taxonomy for traditional adversarial attacks. We explore different metrics used to measure the success of these attacks and provide an analysis and comparison of existing attack strategies. We also analyze existing defense mechanisms and highlight current challenges and potential areas for future research in this developing field. The GitHub page for this work can be accessed at https://github.com/hbrachemi/Survey_energy_attacks/

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 64 of its 92 references that are in the map. First posted on arXiv 6 Mar 2025.

Builds on

64 of 92 references.

References · 64

  1. 2017Attention Is All You Needcited by 60,361
  2. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  3. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  4. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  6. 2013Intriguing properties of neural networkscited by 5,155
  7. 2017MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applicationscited by 3,845
  8. 2018Neural Ordinary Differential Equationscited by 3,779
  9. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
  10. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  11. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
  12. 2019Energy and Policy Considerations for Deep Learning in NLPcited by 1,254
38 more
  1. 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,106
  2. 2022LLM.int8(): 8-bit Matrix Multiplication for Transformers at Scalecited by 906
  3. 2021Membership Inference Attacks From First Principlescited by 878
  4. 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
  5. 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 685
  6. 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
  7. 2017BranchyNet: Fast Inference via Early Exiting from Deep Neural Networkscited by 596
  8. 2021Sparsity in Deep Learning: Pruning and growth for efficient inference and training in neural networkscited by 527
  9. 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 414
  10. 2021AdaViT: Adaptive Tokens for Efficient Vision Transformercited by 362
  11. 2020Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networkscited by 349
  12. 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
  13. 2017SkipNet: Learning Dynamic Routing in Convolutional Networkscited by 332
  14. 2016EIE: Efficient Inference Engine on Compressed Deep Neural Networkcited by 295
  15. 2019White-box vs Black-box: Bayes Optimal Strategies for Membership Inferencecited by 271
  16. 2021AdaViT: Adaptive Vision Transformers for Efficient Image Recognitioncited by 228
  17. 2016Learning to Optimizecited by 195
  18. 2019Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inferencecited by 175
  19. 2017Neural Trojanscited by 153
  20. 2020A Survey of Privacy Attacks in Machine Learningcited by 146
  21. 2020Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Reviewcited by 123
  22. 2016Spatially Adaptive Computation Time for Residual Networkscited by 118
  23. 2020Sponge Examples: Energy-Latency Attacks on Neural Networkscited by 111
  24. 2020Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxificationcited by 95
  25. 2022Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challengescited by 84
  26. 2024Inducing High Energy-Latency of Large Vision-Language Models with Verbose Imagescited by 69
  27. 2023How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defensescited by 66
  28. 2020A Panda? No, It's a Sloth: Slowdown Attacks on Adaptive Multi-Exit Neural Network Inferencecited by 61
  29. 2020Adversarial Machine Learning in Image Classification: A Survey Towards the Defender's Perspectivecited by 59
  30. 2021Adversarial Example Detection for DNN Models: A Review and Experimental Comparisoncited by 52
  31. 2022NICGSlowDown: Evaluating the Efficiency Robustness of Neural Image Caption Generation Modelscited by 50
  32. 2021Survey: Leakage and Privacy at Inference Timecited by 44
  33. 2019Batch-Shaping for Learning Conditional Channel Gated Networkscited by 42
  34. 2022Amplifying Membership Exposure via Data Poisoningcited by 34
  35. 2022Energy-Latency Attacks via Sponge Poisoningcited by 29
  36. 2022Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectorscited by 28
  37. 2020Embedded Encoder-Decoder in Convolutional Networks Towards Explainable AIcited by 24
  38. 2020Adversarial Examples on Object Recognition: A Comprehensive Surveycited by 23

50 most cited of 64 All 64 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 4.

5 papers.