Energy-Latency Attacks: A New Adversarial Threat to Deep Learning
Not on the map. Why?
Abstract (arXiv)
The growing computational demand for deep neural networks ( DNNs) has raised concerns about their energy consumption and carbon footprint, particularly as the size and complexity of the models continue to increase. To address these challenges, energy-efficient hardware and custom accelerators have become essential. Additionally, adaptable DNN s are being developed to dynamically balance performance and efficiency. The use of these strategies became more common to enable sustainable AI deployment. However, these efficiency-focused designs may also introduce vulnerabilities, as attackers can potentially exploit them to increase latency and energy usage by triggering their worst-case-performance scenarios. This new type of attack, called energy-latency attacks, has recently gained significant research attention, focusing on the vulnerability of DNN s to this emerging attack paradigm, which can trigger denial-of-service ( DoS) attacks. This paper provides a comprehensive overview of current research on energy-latency attacks, categorizing them using the established taxonomy for traditional adversarial attacks. We explore different metrics used to measure the success of these attacks and provide an analysis and comparison of existing attack strategies. We also analyze existing defense mechanisms and highlight current challenges and potential areas for future research in this developing field. The GitHub page for this work can be accessed at https://github.com/hbrachemi/Survey_energy_attacks/
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 64 of its 92 references that are in the map. First posted on arXiv 6 Mar 2025.
Builds on
64 of 92 references.
References · 64
- 2017Attention Is All You Needcited by 60,361
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2017MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applicationscited by 3,845
- 2018Neural Ordinary Differential Equationscited by 3,779
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,318
- 2019Energy and Policy Considerations for Deep Learning in NLPcited by 1,254
38 more
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,106
- 2022LLM.int8(): 8-bit Matrix Multiplication for Transformers at Scalecited by 906
- 2021Membership Inference Attacks From First Principlescited by 878
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
- 2019Square Attack: a query-efficient black-box adversarial attack via random searchcited by 685
- 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
- 2017BranchyNet: Fast Inference via Early Exiting from Deep Neural Networkscited by 596
- 2021Sparsity in Deep Learning: Pruning and growth for efficient inference and training in neural networkscited by 527
- 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 414
- 2021AdaViT: Adaptive Tokens for Efficient Vision Transformercited by 362
- 2020Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networkscited by 349
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
- 2017SkipNet: Learning Dynamic Routing in Convolutional Networkscited by 332
- 2016EIE: Efficient Inference Engine on Compressed Deep Neural Networkcited by 295
- 2019White-box vs Black-box: Bayes Optimal Strategies for Membership Inferencecited by 271
- 2021AdaViT: Adaptive Vision Transformers for Efficient Image Recognitioncited by 228
- 2016Learning to Optimizecited by 195
- 2019Stolen Memories: Leveraging Model Memorization for Calibrated White-Box Membership Inferencecited by 175
- 2017Neural Trojanscited by 153
- 2020A Survey of Privacy Attacks in Machine Learningcited by 146
- 2020Backdoor Attacks and Countermeasures on Deep Learning: A Comprehensive Reviewcited by 123
- 2016Spatially Adaptive Computation Time for Residual Networkscited by 118
- 2020Sponge Examples: Energy-Latency Attacks on Neural Networkscited by 111
- 2020Deep Feature Space Trojan Attack of Neural Networks by Controlled Detoxificationcited by 95
- 2022Survey on Federated Learning Threats: concepts, taxonomy on attacks and defences, experimental study and challengescited by 84
- 2024Inducing High Energy-Latency of Large Vision-Language Models with Verbose Imagescited by 69
- 2023How Deep Learning Sees the World: A Survey on Adversarial Attacks & Defensescited by 66
- 2020A Panda? No, It's a Sloth: Slowdown Attacks on Adaptive Multi-Exit Neural Network Inferencecited by 61
- 2020Adversarial Machine Learning in Image Classification: A Survey Towards the Defender's Perspectivecited by 59
- 2021Adversarial Example Detection for DNN Models: A Review and Experimental Comparisoncited by 52
- 2022NICGSlowDown: Evaluating the Efficiency Robustness of Neural Image Caption Generation Modelscited by 50
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2019Batch-Shaping for Learning Conditional Channel Gated Networkscited by 42
- 2022Amplifying Membership Exposure via Data Poisoningcited by 34
- 2022Energy-Latency Attacks via Sponge Poisoningcited by 29
- 2022Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectorscited by 28
- 2020Embedded Encoder-Decoder in Convolutional Networks Towards Explainable AIcited by 24
- 2020Adversarial Examples on Object Recognition: A Comprehensive Surveycited by 23
50 most cited of 64 All 64 (JSON)
Built on by
Citing papers per year: 2025: 1; 2026: 4.
5 papers.
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challengescited by 15
- 2026From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agentscited by 1
- 2026Inference Cost Attacks for Retrieval-Augmented Large Language Modelscited by 1
- 2026VidDoS: Universal Denial-of-Service Attack on Video-based Large Language Modelscited by 0
- 2026Beyond Predictable Paths: Redefining AI Security Incident Reporting for Agentscited by 0
- 2026Beyond Predictable Paths: Redefining AI Security Incident Reporting for Agents21 Sep 2026
- 2026Inference Cost Attacks for Retrieval-Augmented Large Language Models31 May 2026
- 2026From Thinker to Society: Security in Hierarchical Autonomy Evolution of AI Agents8 Mar 2026
- 2026VidDoS: Universal Denial-of-Service Attack on Video-based Large Language Models2 Mar 2026
- 2025Alignment and Safety in Large Language Models: Safety Mechanisms, Training Paradigms, and Emerging Challenges25 Jul 2025