{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,6]],"date-time":"2026-04-06T10:26:36Z","timestamp":1775471196988,"version":"3.50.1"},"reference-count":35,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2022,8,29]],"date-time":"2022-08-29T00:00:00Z","timestamp":1661731200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2022,8,29]],"date-time":"2022-08-29T00:00:00Z","timestamp":1661731200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62125208"],"award-info":[{"award-number":["62125208"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Supercomput"],"published-print":{"date-parts":[[2023,2]]},"DOI":"10.1007\/s11227-022-04759-y","type":"journal-article","created":{"date-parts":[[2022,8,29]],"date-time":"2022-08-29T11:02:48Z","timestamp":1661770968000},"page":"3095-3111","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Int-Monitor: a model triggered hardware trojan in deep learning accelerators"],"prefix":"10.1007","volume":"79","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3620-8244","authenticated-orcid":false,"given":"Peng","family":"Li","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Rui","family":"Hou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,8,29]]},"reference":[{"key":"4759_CR1","doi-asserted-by":"publisher","first-page":"436","DOI":"10.1038\/nature14539","volume":"521","author":"Y LeCun","year":"2015","unstructured":"LeCun Y, Bengio Y, Hinton G (2015) Deep learning. Nature 521:436\u2013444. https:\/\/doi.org\/10.1038\/nature14539","journal-title":"Nature"},{"key":"4759_CR2","unstructured":"Keith D F (2017) A brief history of deep learning. https:\/\/www.dataversity.net\/brief-history-deep-learning\/"},{"key":"4759_CR3","unstructured":"Zou Z, Shi Z, Guo Y, Ye J (2019) Object detection in 20 Years: a survey. https:\/\/arxiv.org\/abs\/1905.05055"},{"key":"4759_CR4","doi-asserted-by":"crossref","unstructured":"Ham T J, Jung S J, Kim S, Oh Y H, Park Y, Song Y, Park J H, Lee S, Park K, Lee J W, Jeong D (2020) A3: accelerating attention mechanisms in neural networks with approximation. In 2020 IEEE International Symposium on High Performance Computer Architecture (HPCA2020) pp 328\u2013341","DOI":"10.1109\/HPCA47549.2020.00035"},{"key":"4759_CR5","doi-asserted-by":"publisher","first-page":"225134","DOI":"10.1109\/ACCESS.2020.3039858","volume":"8","author":"M Capra","year":"2020","unstructured":"Capra M, Bussolino B, Marchisio A, Masera G, Martina MShafique M, (2020) Hardware and software optimizations for accelerating deep neural networks: survey of current trends, challenges, and the road ahead. IEEE Access 8:225134\u2013225180","journal-title":"IEEE Access"},{"issue":"118","key":"4759_CR6","first-page":"1","volume":"41","author":"YX Wu","year":"2018","unstructured":"Wu YX, Liang K, Liu Y, Cui HM (2018) The progress and trends of FPGA-based accelerators in deep learning. Chin J Comput 41(118):1\u201321","journal-title":"Chin J Comput"},{"issue":"6","key":"4759_CR7","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3357375","volume":"52","author":"L Liu","year":"2020","unstructured":"Liu L, Li Z, Lu Y, Deng Y, Han J, Yin S, Wei S (2020) A survey of coarse-grained reconfigurable architecture and design: taxonomy, challenges, and applications. ACM Comput Surv 52(6):1\u201339","journal-title":"ACM Comput Surv"},{"key":"4759_CR8","unstructured":"Emer J, Sze V, Chen Y, Yang T (2020) Tutorial on hardware accelerators for deep neural networks. http:\/\/eyeriss.mit.edu\/tutorial.html"},{"key":"4759_CR9","doi-asserted-by":"crossref","unstructured":"Mittal S, Gupta H, Srivastava S (2021) A survey on hardware security of DNN models and accelerators. J Syst Archit, vol 117, pp 102\u2013163. https:\/\/www.sciencedirect.com\/science\/article\/pii\/S1383762121001168","DOI":"10.1016\/j.sysarc.2021.102163"},{"issue":"15","key":"4759_CR10","first-page":"67","volume":"11","author":"M Real","year":"2021","unstructured":"Real M, Salvador R (2021) Physical side-channel attacks on embedded neural networks: a survey. Appl Sci 11(15):67\u201390","journal-title":"Appl Sci"},{"key":"4759_CR11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-68511-3","author":"S Bhunia","year":"2018","unstructured":"Bhunia S, Tehranipoor MM (2018) The hardware trojan war. Attacks Myths Def. https:\/\/doi.org\/10.1007\/978-3-319-68511-3","journal-title":"Attacks Myths Def"},{"issue":"1","key":"4759_CR12","first-page":"74","volume":"2","author":"JF Zhao","year":"2017","unstructured":"Zhao JF, Shi G (2017) A survey on the studies of hardware trojan. J Cyber Secur 2(1):74\u201390","journal-title":"J Cyber Secur"},{"key":"4759_CR13","unstructured":"Rakesh C (2015) Hardware trojan detection in third party digital IP cores. http:\/\/ethesis.nitrkl.ac.in\/7741\/1\/604.pdf"},{"key":"4759_CR14","doi-asserted-by":"crossref","unstructured":"Bhasin S, Danger J, Guilley S, Ngo X T, Sauvage L (2013) Hardware trojan horses in cryptographic IP cores. In: Workshop on Fault Diagnosis and Tolerance in Cryptography, pp 15\u201329","DOI":"10.1109\/FDTC.2013.15"},{"issue":"7","key":"4759_CR15","doi-asserted-by":"publisher","first-page":"1370","DOI":"10.1109\/TCAD.2017.2748021","volume":"37","author":"X Chen","year":"2018","unstructured":"Chen X, Liu Q, Yao S, Wang J, Xu Q, Wang Y, Liu Y, Yang HZ (2018) Hardware trojan detection in third-party digital intellectual property cores by multilevel feature analysis. IEEE Trans Comput-Aided Design Integr Circuits Syst 37(7):1370\u20131383","journal-title":"IEEE Trans Comput-Aided Design Integr Circuits Syst"},{"issue":"6","key":"4759_CR16","doi-asserted-by":"publisher","first-page":"1230","DOI":"10.1109\/TCAD.2020.2995347","volume":"40","author":"X Hu","year":"2020","unstructured":"Hu X, Zhao Y, Deng L, Liang L, Zuo PF, Ye J, Lin Y, Xie Y (2020) Practical attacks on deep neural networks by memory trojaning. IEEE Trans Comput-Aided Design Integrated Circuits Syst 40(6):1230\u20131243","journal-title":"IEEE Trans Comput-Aided Design Integrated Circuits Syst"},{"key":"4759_CR17","doi-asserted-by":"crossref","unstructured":"Zhao Y, Hu X, Li S C, Ye J, Deng L, Ji Y, Xu J Y, Wu D, Xie Y (2019) Memory Trojan attack on neural network accelerator. In 2019 Design, Automation & Test in Europe Conference & Exhibition (DATE), pp 1415\u20131420","DOI":"10.23919\/DATE.2019.8715027"},{"key":"4759_CR18","doi-asserted-by":"crossref","unstructured":"Trippel T, Shin K, Bush K, Hicks M (2021) Bomberman: defining and defeating hardware ticking timebombs at design-time. In: 2021 IEEE Symposium on Security and Privacy (SP), pp 970\u2013986","DOI":"10.1109\/SP40001.2021.00052"},{"key":"4759_CR19","doi-asserted-by":"crossref","unstructured":"Liu Z Z, Ye J, Hu X, Li H, Li X, Hu Y (2020) Sequence triggered hardware trojan in neural network accelerator. In IEEE 38th VLSI Test Symposium (VTS), pp 1\u20136","DOI":"10.1109\/VTS48691.2020.9107582"},{"key":"4759_CR20","doi-asserted-by":"crossref","unstructured":"Li H, Liu Q, Zhang J L (2016) A survey of hardware trojan threat and defense. Integration, 55, pp 426\u2013437. https:\/\/www.sciencedirect.com\/science\/article\/pii\/S0167926016000067","DOI":"10.1016\/j.vlsi.2016.01.004"},{"key":"4759_CR21","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1038\/s41467-020-20277-y","volume":"12","author":"Y Wang","year":"2021","unstructured":"Wang Y, Tang H, Xie Y (2021) An in-memory computing architecture based on two-dimensional semiconductors for multiply-accumulate operations. Nat Commun 12:33\u201347","journal-title":"Nat Commun"},{"key":"4759_CR22","unstructured":"NVIDIA (2018) Hardware architectural specification. http:\/\/nvdla.org\/hw\/v1\/hwarch.html"},{"key":"4759_CR23","doi-asserted-by":"crossref","unstructured":"Shan L, Zhang M, Deng L, GongG (2016) A dynamic multi-precision fixed-point data quantization strategy for convolutional neural network. In: Computer Engineering and Technology, pp 102\u2013111","DOI":"10.1007\/978-981-10-3159-5_10"},{"key":"4759_CR24","unstructured":"Lin D, Talathi S, Sreekanth V (2016) Fixed point quantization of deep convolutional networks. In: Proceedings of The 33rd International Conference on Machine Learning (PMLR) 48, pp 2849\u20132858"},{"key":"4759_CR25","doi-asserted-by":"crossref","unstructured":"Qiu J, Wang J, Yao S, Guo K, Li B, Zhou E, Yu J, Tang T, Xu N, Song S, Wang Y, Yang H (2016) Going deeper with embedded FPGA platform for convolutional neural network. In: FPGA\u201916, 10, pp 26\u201335","DOI":"10.1145\/2847263.2847265"},{"key":"4759_CR26","doi-asserted-by":"crossref","unstructured":"Cong J, Fang Z,Lo M, Wang H, Xu J, Zhang S (2018) Understanding performance differences of FPGAs and GPUs. In: FCCM, pp 93\u201396","DOI":"10.1145\/3174243.3174970"},{"key":"4759_CR27","doi-asserted-by":"crossref","unstructured":"Wang X B, Hou R, Zhu Y Z, Meng D, Zhang J (2019) NPUFort: a secure architecture of DNN accelerator against model inversion attack. In: CF2019, pp 190\u2013196","DOI":"10.1145\/3310273.3323070"},{"key":"4759_CR28","doi-asserted-by":"crossref","unstructured":"Wang X B, Hou R, Zhao B Y, Yuan F K, Zhang J, Meng D, Qian X H (2020) DNNGuard: an elastic heterogeneous DNN accelerator architecture against adversarial attacks. In: ASPLOS2020, pp 19\u201334","DOI":"10.1145\/3373376.3378532"},{"key":"4759_CR29","unstructured":"Gupta Aman (2018) Hardware trojan attack and defense techniques. Creative Compon. https:\/\/lib.dr.iastate.edu\/creativecomponents\/391"},{"key":"4759_CR30","doi-asserted-by":"crossref","unstructured":"Clements J, Lao Y (2018) Hardware trojan attacks on neural networks. https:\/\/arxiv.org\/pdf\/1806.05768.pdf","DOI":"10.1109\/ISCAS.2019.8702493"},{"key":"4759_CR31","doi-asserted-by":"crossref","unstructured":"Ye J, Hu Y, Li X W (2018) Hardware trojan in CNN FPGA accelerator. In: Proceedings of the 26th Asia and South Pacific Design Automation Conference, pp 68\u201373","DOI":"10.1109\/ATS.2018.00024"},{"key":"4759_CR32","unstructured":"[Online]. https:\/\/maestro.ece.gatech.edu\/"},{"key":"4759_CR33","unstructured":"Chen C, SIMD accelerator. https:\/\/github.com\/dhm2013724\/yolov2_xilinx_fpga"},{"key":"4759_CR34","unstructured":"NVDLA, [Online]. https:\/\/github.com\/nvdla\/"},{"key":"4759_CR35","unstructured":"NVDLA primer, [Online]. http:\/\/nvdla.org\/primer.html"}],"container-title":["The Journal of Supercomputing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11227-022-04759-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11227-022-04759-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11227-022-04759-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,13]],"date-time":"2023-01-13T12:18:22Z","timestamp":1673612302000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11227-022-04759-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,8,29]]},"references-count":35,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2023,2]]}},"alternative-id":["4759"],"URL":"https:\/\/doi.org\/10.1007\/s11227-022-04759-y","relation":{},"ISSN":["0920-8542","1573-0484"],"issn-type":[{"value":"0920-8542","type":"print"},{"value":"1573-0484","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,8,29]]},"assertion":[{"value":"7 August 2022","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 August 2022","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors have declared that they have no conficts of interest that are relevant to the content of this work.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}