LLA: Enhancing Security and Privacy for Generative Models with Logic-Locked Accelerators
Not on the map. Why?
Abstract (arXiv)
We introduce LLA, an effective intellectual property (IP) protection scheme for generative AI models. LLA leverages the synergy between hardware and software to defend against various supply chain threats, including model theft, model corruption, and information leakage. On the software side, it embeds key bits into neurons that can trigger outliers to degrade performance and applies invariance transformations to obscure the key values. On the hardware side, it integrates a lightweight locking module into the AI accelerator while maintaining compatibility with various dataflow patterns and toolchains. An accelerator with a pre-stored secret key acts as a license to access the model services provided by the IP owner. The evaluation results show that LLA can withstand a broad range of oracle-guided key optimization attacks, while incurring a minimal computational overhead of less than 0.1% for 7,168 key bits.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 15 of its 43 references that are in the map. First posted on arXiv 26 Dec 2025.
Builds on
15 of 43 references.
References · 15
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2024QuaRot: Outlier-Free 4-Bit Inference in Rotated LLMscited by 634
- 2024SliceGPT: Compress Large Language Models by Deleting Rows and Columnscited by 385
- 2024ShortGPT: Layers in Large Language Models are More Redundant Than You Expectcited by 383
- 2024QuIP#: Even Better LLM Quantization with Hadamard Incoherence and Lattice Codebookscited by 378
- 2017Embedding Watermarks into Deep Neural Networkscited by 248
- 2024DuQuant: Distributing Outliers via Dual Transformation Makes Stronger Quantized LLMscited by 167
- 2023Outlier Weighed Layerwise Sparsity (OWL): A Missing Secret Sauce for Pruning LLMs to High Sparsitycited by 165
- 2024Compact Language Models via Pruning and Knowledge Distillationcited by 148
- 2022The Lazy Neuron Phenomenon: On Emergence of Activation Sparsity in Transformerscited by 122
- 2021BERT Busters: Outlier Dimensions that Disrupt Transformerscited by 112
- 2023Prompt as Triggers for Backdoor Attack: Examining the Vulnerability in Language Modelscited by 94
Built on by
Not cited yet.