Edge-Only Universal Adversarial Attacks in Distributed Learning

Researchers discovered that attackers can fool distributed AI systems (where neural networks are split across edge devices and cloud servers) by only having access to the edge portion. They created universal adversarial perturbations (tiny, crafted changes to input data designed to fool AI models), which can manipulate the feature representations (the internal data the model creates to understand images) at the edge device in ways that cause incorrect predictions even in the unseen cloud portion of the model. This attack works without the attacker knowing anything about the cloud component, showing a new security weakness in split AI systems.