hardware trojans

We show that splitting backdoor logic across the hardware-software boundary yields an attack that leaves the model looking fully benign, evading state-of-the-art model-level defenses at near-zero hardware overhead.