{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,17]],"date-time":"2026-08-17T15:57:32Z","timestamp":1786982252240,"version":"build-2736575974"},"reference-count":38,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2021,4,29]],"date-time":"2021-04-29T00:00:00Z","timestamp":1619654400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,4,29]],"date-time":"2021-04-29T00:00:00Z","timestamp":1619654400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"funder":[{"name":"European Research Council"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cryptogr. Commun."],"published-print":{"date-parts":[[2021,7]]},"DOI":"10.1007\/s12095-021-00479-x","type":"journal-article","created":{"date-parts":[[2021,4,29]],"date-time":"2021-04-29T11:02:55Z","timestamp":1619694175000},"page":"573-585","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["How to fool a black box machine learning based side-channel security evaluation"],"prefix":"10.1007","volume":"13","author":[{"given":"Charles-Henry","family":"Bertrand Van Ouytsel","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7595-718X","authenticated-orcid":false,"given":"Olivier","family":"Bronchain","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ga\u00ebtan","family":"Cassiers","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fran\u00e7ois-Xavier","family":"Standaert","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,4,29]]},"reference":[{"key":"479_CR1","unstructured":"Goodwill, G., Jun, B., Jaffe, J., Rohatgi, P., et al.: A testing methodology for side-channel resistance validation. In: NIST non-invasive attack testing workshop, vol. 7, pp. 115\u2013136 (2011)"},{"key":"479_CR2","unstructured":"Cooper, J., Mulder, E.D., Goodwill, G., Jaffe, J., Kenworthy, G., Rohatgi, P.: Test vector leakage assessment (tvla) methodology in practice. In: International cryptographic module conference (ICMC 2013), vol. 20, p. 13 (2013)"},{"key":"479_CR3","doi-asserted-by":"crossref","unstructured":"Mather, L., Oswald, E., Bandenburg, J., W\u00f3jcik, M: Does my device leak information? an a priori statistical power analysis of leakage detection tests. In: ASIACRYPT (1), LNCS, vol. 8269, pp. 486\u2013505. Springer (2013)","DOI":"10.1007\/978-3-642-42033-7_25"},{"issue":"2","key":"479_CR4","doi-asserted-by":"publisher","first-page":"85","DOI":"10.1007\/s13389-016-0120-y","volume":"6","author":"T Schneider","year":"2016","unstructured":"Schneider, T., Moradi, A.: Leakage assessment methodology - extended version. J. Cryptographic Engineering 6(2), 85\u201399 (2016)","journal-title":"J. Cryptographic Engineering"},{"key":"479_CR5","doi-asserted-by":"crossref","unstructured":"Durvaux, F., Standaert, F-X: From improved leakage detection to the detection of points of interests in leakage traces. In: EUROCRYPT (1), LNCS, vol. 9665, pp. 240\u2013262. Springer (2016)","DOI":"10.1007\/978-3-662-49890-3_10"},{"issue":"4","key":"479_CR6","doi-asserted-by":"publisher","first-page":"293","DOI":"10.1007\/s13389-011-0023-x","volume":"1","author":"G Hospodar","year":"2011","unstructured":"Hospodar, G., Gierlichs, B., Mulder, E.D., Verbauwhede, I., Vandewalle, J.: Machine learning in side-channel analysis: a first study. J. Cryptographic Engineering 1(4), 293\u2013302 (2011)","journal-title":"J. Cryptographic Engineering"},{"key":"479_CR7","doi-asserted-by":"crossref","unstructured":"Heuser, A., Zohner, M.: Intelligent machine homicide - breaking cryptographic devices using support vector machines. In: COSADE, LNCS, vol. 7275, pp. 249\u2013264. Springer (2012)","DOI":"10.1007\/978-3-642-29912-4_18"},{"key":"479_CR8","doi-asserted-by":"crossref","unstructured":"Lerman, L., Medeiros, S.F., Bontempi, G., Markowitch, O.: A machine learning approach against a masked AES. In: CARDIS, LNCS, vol. 8419, pp. 61\u201375. Springer (2013)","DOI":"10.1007\/978-3-319-14123-7_5"},{"key":"479_CR9","doi-asserted-by":"crossref","unstructured":"Lerman, L., Poussier, R., Bontempi, G., Markowitch, O., Standaert, F-X: Template attacks vs. machine learning revisited (and the curse of dimensionality in side-channel analysis). In: COSADE, LNCS, vol. 9064, pp. 20\u201333. Springer (2015)","DOI":"10.1007\/978-3-319-21476-4_2"},{"key":"479_CR10","doi-asserted-by":"crossref","unstructured":"Maghrebi, H., Portigliatti, T., Prouff, E.: Breaking cryptographic implementations using deep learning techniques. In: SPACE, LNCS, vol. 10076, pp. 3\u201326. Springer (2016)","DOI":"10.1007\/978-3-319-49445-6_1"},{"key":"479_CR11","doi-asserted-by":"crossref","unstructured":"Cagli, E., Dumas, C., Prouff, E.: Convolutional neural networks with data augmentation against jitter-based countermeasures - profiling attacks without pre-processing. In: CHES, LNCS, vol. 10529, pp. 45\u201368. Springer (2017)","DOI":"10.1007\/978-3-319-66787-4_3"},{"key":"479_CR12","doi-asserted-by":"crossref","unstructured":"Picek, S., Samiotis, I.P., Kim, J., Heuser, A., Bhasin, S., Legay, A.: On the performance of convolutional neural networks for side-channel analysis. In: SPACE, LNCS, vol. 11348, pp. 157\u2013176. Springer (2018)","DOI":"10.1007\/978-3-030-05072-6_10"},{"key":"479_CR13","first-page":"505","volume":"2019","author":"F Wegener","year":"2019","unstructured":"Wegener, F., Moos, T., Moradi, A.: DL-LA: deep learning leakage assessment: A modern roadmap for SCA evaluations. IACR Cryptology ePrint Archive 2019, 505 (2019)","journal-title":"IACR Cryptology ePrint Archive"},{"key":"479_CR14","doi-asserted-by":"crossref","unstructured":"Standaert, F-X: How (not) to use welch\u2019s t-test in side-channel security evaluations. In: CARDIS, LNCS, vol. 11389, pp. 65\u201379. Springer (2018)","DOI":"10.1007\/978-3-030-15462-2_5"},{"issue":"2","key":"479_CR15","doi-asserted-by":"publisher","first-page":"318","DOI":"10.46586\/tches.v2019.i2.318-345","volume":"2019","author":"O Bronchain","year":"2019","unstructured":"Bronchain, O., Schneider, T., Standaert, F.-X.: Multi-tuple leakage detection and the dependent signal issue. IACR Trans. Cryptogr. Hardw. Embed. Syst. 2019(2), 318\u2013345 (2019)","journal-title":"IACR Trans. Cryptogr. Hardw. Embed. Syst."},{"key":"479_CR16","doi-asserted-by":"crossref","unstructured":"Whitnall, C., Oswald, E.: A critical analysis of ISO 17825 (\u2019testing methods for the mitigation of non-invasive attack classes against cryptographic modules\u2019). In: ASIACRYPT (3), LNCS, vol. 11923, pp. 256\u2013284. Springer (2019)","DOI":"10.1007\/978-3-030-34618-8_9"},{"issue":"3","key":"479_CR17","doi-asserted-by":"publisher","first-page":"68","DOI":"10.1109\/MSP.2016.51","volume":"14","author":"PD McDaniel","year":"2016","unstructured":"McDaniel, P.D., Papernot, N., Celik, Z.B.: Machine learning in adversarial settings. IEEE Security & Privacy 14(3), 68\u201372 (2016)","journal-title":"IEEE Security & Privacy"},{"key":"479_CR18","doi-asserted-by":"crossref","unstructured":"Barreno, M., Nelson, B., Sears, R., Joseph, A.D., Tygar, J.D.: Can machine learning be secure?. In: AsiaCCS, pp. 16\u201325. ACM (2006)","DOI":"10.1145\/1128817.1128824"},{"key":"479_CR19","unstructured":"Biggio, B., Nelson, B., Laskov, P.: Poisoning attacks against support vector machines. In: ICML. icml.cc \/ Omnipress (2012)"},{"key":"479_CR20","unstructured":"Tram\u00e8r, F, Zhang, F., Juels, A., Reiter, M.K., Ristenpart, T.: Stealing machine learning models via prediction apis. In: USENIX security symposium, pp. 601\u2013618. USENIX Association (2016)"},{"key":"479_CR21","doi-asserted-by":"crossref","unstructured":"Shokri, R., Stronati, M., Song, C., Shmatikov, V.: Membership inference attacks against machine learning models. In: IEEE symposium on security and privacy, pp. 3\u201318. IEEE Computer Society (2017)","DOI":"10.1109\/SP.2017.41"},{"key":"479_CR22","doi-asserted-by":"crossref","unstructured":"Moradi, A., Standaert, F-X: Moments-correlating DPA. In: TIS@CCS, pp. 5\u201315. ACM (2016)","DOI":"10.1145\/2996366.2996369"},{"issue":"5","key":"479_CR23","doi-asserted-by":"publisher","first-page":"845","DOI":"10.1109\/TNNLS.2013.2292894","volume":"25","author":"B Fr\u00e9nay","year":"2014","unstructured":"Fr\u00e9nay, B, Verleysen, M.: Classification in the presence of label noise: A survey. IEEE Trans. Neural Netw. Learning Syst. 25(5), 845\u2013869 (2014)","journal-title":"IEEE Trans. Neural Netw. Learning Syst."},{"key":"479_CR24","doi-asserted-by":"crossref","unstructured":"Renauld, M., Standaert, F-X, Veyrat-Charvillon, N., Kamel, D., Flandre, D.: A formal study of power variability issues and side-channel attacks for nanoscale devices. In: EUROCRYPT, LNCS, vol. 6632, pp. 109\u2013128. Springer (2011)","DOI":"10.1007\/978-3-642-20465-4_8"},{"key":"479_CR25","doi-asserted-by":"crossref","unstructured":"Whitnall, C., Oswald, E., Standaert, F-X: The myth of generic dpa...and the magic of learning. In: CT-RSA, LNCS, vol. 8366, pp. 183\u2013205. Springer (2014)","DOI":"10.1007\/978-3-319-04852-9_10"},{"issue":"2","key":"479_CR26","doi-asserted-by":"publisher","first-page":"107","DOI":"10.46586\/tches.v2019.i2.107-131","volume":"2019","author":"B Timon","year":"2019","unstructured":"Timon, B.: Non-profiled deep learning-based side-channel attacks with sensitivity analysis. IACR Trans. Cryptogr. Hardw. Embed. Syst. 2019(2), 107\u2013131 (2019)","journal-title":"IACR Trans. Cryptogr. Hardw. Embed. Syst."},{"key":"479_CR27","doi-asserted-by":"crossref","unstructured":"Picek, S., Jap, D., Bhasin, S.: Poster: When adversary becomes the guardian - towards side-channel security with adversarial attacks. In: CCS, pp. 2673\u20132675. ACM (2019)","DOI":"10.1145\/3319535.3363284"},{"issue":"2","key":"479_CR28","first-page":"1","volume":"2020","author":"O Bronchain","year":"2020","unstructured":"Bronchain, O., Standaert, F-X: Side-channel countermeasures\u2019 dissection and the limits of closed source security evaluations. IACR Trans. Cryptogr. Hardw. Embed. Syst. 2020(2), 1\u201325 (2020)","journal-title":"IACR Trans. Cryptogr. Hardw. Embed. Syst."},{"key":"479_CR29","doi-asserted-by":"crossref","unstructured":"Duc, A., Faust, S., Standaert, F.-X.: Making masking security proofs concrete - or how to evaluate the security of any leaking device. In: EUROCRYPT (1), LNCS, vol. 9056, pp. 401\u2013429. Springer (2015)","DOI":"10.1007\/978-3-662-46800-5_16"},{"key":"479_CR30","volume-title":"Pattern recognition and machine learning, 5th edition. Information science and statistics","author":"CM Bishop","year":"2007","unstructured":"Bishop, C.M.: Pattern recognition and machine learning, 5th edition. Information science and statistics. Springer, Berlin (2007). http:\/\/www.worldcat.org\/oclc\/71008143"},{"key":"479_CR31","doi-asserted-by":"crossref","unstructured":"Chari, S., Jutla, C.S., Rao, J.R., Rohatgi, P.: Towards sound approaches to counteract power-analysis attacks. In: CRYPTO, LNCS, vol. 1666, pp. 398\u2013412. Springer (1999)","DOI":"10.1007\/3-540-48405-1_26"},{"key":"479_CR32","doi-asserted-by":"crossref","unstructured":"Reparaz, O., Bilgin, B., Nikova, S., Gierlichs, B., Verbauwhede, I.: Consolidating masking schemes. In: CRYPTO, Lecture Notes in Computer Science, vol. 9215, pp. 764\u2013783. Springer (2015)","DOI":"10.1007\/978-3-662-47989-6_37"},{"key":"479_CR33","first-page":"185","volume":"2020","author":"G Cassiers","year":"2020","unstructured":"Cassiers, G., Gr\u00e9goire, B, Levi, I., Standaert, F-X: Hardware private circuits: From trivial composition to full verification. IACR Cryptol. ePrint Arch. 2020, 185 (2020)","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"479_CR34","doi-asserted-by":"crossref","unstructured":"Gro\u00df, H, Mangard, S., Korak, T.: Domain-oriented masking: Compact masked hardware implementations with arbitrary protection order. In: TIS@CCS, p. 3. ACM (2016)","DOI":"10.1145\/2996366.2996426"},{"key":"479_CR35","doi-asserted-by":"crossref","unstructured":"Standaert, F-X, Malkin, T., Yung, M.: A unified framework for the analysis of side-channel key recovery attacks. In: EUROCRYPT, LNCS, vol. 5479, pp. 443\u2013461. Springer (2009)","DOI":"10.1007\/978-3-642-01001-9_26"},{"key":"479_CR36","first-page":"2825","volume":"12","author":"F Pedregosa","year":"2011","unstructured":"Pedregosa, F., Varoquaux, G., Gramfort, A., Michel, V., Thirion, B., Grisel, O., Blondel, M., Prettenhofer, P., Weiss, R., Dubourg, V., Vanderplas, J., Passos, A., Cournapeau, D., Brucher, M., Perrot, M., Duchesnay, E.: Scikit-learn: Machine learning in Python. J. Mach. Learn. Res. 12, 2825\u20132830 (2011)","journal-title":"J. Mach. Learn. Res."},{"key":"479_CR37","doi-asserted-by":"crossref","unstructured":"Mangard, S.: Hardware countermeasures against DPA ? A statistical analysis of their effectiveness. In: CT-RSA, LNCS, vol. 2964, pp. 222\u2013235. Springer (2004)","DOI":"10.1007\/978-3-540-24660-2_18"},{"key":"479_CR38","doi-asserted-by":"crossref","unstructured":"Goudarzi, D., Rivain, M.: How fast can higher-order masking be in software?. In: EUROCRYPT (1), Lecture notes in computer science, vol. 10210, pp. 567\u2013597 (2017)","DOI":"10.1007\/978-3-319-56620-7_20"}],"container-title":["Cryptography and Communications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s12095-021-00479-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s12095-021-00479-x\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s12095-021-00479-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,8,10]],"date-time":"2021-08-10T07:58:46Z","timestamp":1628582326000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s12095-021-00479-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,4,29]]},"references-count":38,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2021,7]]}},"alternative-id":["479"],"URL":"https:\/\/doi.org\/10.1007\/s12095-021-00479-x","relation":{},"ISSN":["1936-2447","1936-2455"],"issn-type":[{"value":"1936-2447","type":"print"},{"value":"1936-2455","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,4,29]]},"assertion":[{"value":"15 June 2020","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"25 February 2021","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 April 2021","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}