Bit-flip attacks on microcontroller-scale keyword spotting: how many flips, and does 4-bit quantisation change the count? A trained neural network is stored in memory as a list of integers. A ...