becoming progressively important. Recent studies demonstrate attackers can exploit system-
level techniques exploiting the RowHammer vulnerability of DRAM to deterministically and
precisely flip bits in Deep Neural Networks (DNN) model weights to affect inference
accuracy. The existing defense mechanisms are software-based, such as weight
reconstruction requiring expensive training overhead or performance degradation. On the …