{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,19]],"date-time":"2026-06-19T16:04:04Z","timestamp":1781885044990,"version":"3.54.5"},"reference-count":52,"publisher":"Springer Science and Business Media LLC","issue":"3-4","license":[{"start":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T00:00:00Z","timestamp":1754006400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T00:00:00Z","timestamp":1754006400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Hardw Syst Secur"],"published-print":{"date-parts":[[2025,12]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Convolutional neural network accelerators are increasingly used in safety\u2013critical applications, including autonomous vehicles. Therefore, they are particularly vulnerable to hardware Trojan insertion, a security attack that takes place during the development of integrated circuits. This work presents for the first time a large-scale study of the impact of hardware Trojan insertion on convolutional neural network accelerators, focusing on those that use approximate commuting techniques, prevalent in embedded applications. We investigate three types of such networks, MobileNet V2, ShuffleNet V2, and GhostNet, trained in datasets of grayscale speed limit sign images and GTSRB. Our results show that certain parts of these architectures are more susceptible to hardware Trojan attacks, specifically a specific set of processing elements, referred to as \u201cimportant\u201d in the classification, ReLU6, and Max pooling layers, respectively. These findings are subsequently used to develop two countermeasures; the first relies on selective hardware redundancy (SHR), and the second uses a combination of hardware and time redundancy (SHTR). The proposed defenses are experimentally validated. Our results show that the SHR provides speedy recovery from an attack while incurring between 6 and 10% area overheads, whereas SHTR requires more time to detect the Trojan, and its area overhead is much smaller (~\u20090.3%).<\/jats:p>","DOI":"10.1007\/s41635-025-00164-y","type":"journal-article","created":{"date-parts":[[2025,8,1]],"date-time":"2025-08-01T03:30:31Z","timestamp":1754019031000},"page":"89-106","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Towards Hardware Trojan Resilient Convolutional Neural Network Accelerators"],"prefix":"10.1007","volume":"9","author":[{"given":"Peiyao","family":"Sun","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Basel","family":"Halak","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tom J.","family":"Kazmierski","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,8,1]]},"reference":[{"key":"164_CR1","unstructured":"O'Shea K, Nash R (2015) An introduction to convolutional neural networks. arXiv preprint arXiv:1511.08458"},{"key":"164_CR2","doi-asserted-by":"publisher","first-page":"366","DOI":"10.1016\/j.neunet.2019.09.024","volume":"121","author":"N Abderrahmane","year":"2020","unstructured":"Abderrahmane N, Lemaire E, Miramond B (2020) Design space exploration of hardware spiking neurons for embedded artificial intelligence. Neural Netw 121:366\u2013386","journal-title":"Neural Netw"},{"key":"164_CR3","doi-asserted-by":"publisher","first-page":"365","DOI":"10.1109\/DSD.2018.00070","volume-title":"2018 21st Euromicro conference on digital system design (DSD), Prague, Czech Republic","author":"R Struharik","year":"2018","unstructured":"Struharik R, Vukobratovi\u0107 B, Erdeljan A, Rakanovi\u0107 D (2018) CoNNA \u2013 compressed CNN hardware accelerator. In: 2018 21st Euromicro conference on digital system design (DSD), Prague, Czech Republic. IEEE, pp 365\u2013372. https:\/\/doi.org\/10.1109\/DSD.2018.00070"},{"key":"164_CR4","doi-asserted-by":"publisher","first-page":"821","DOI":"10.23919\/DATE.2018.8342119","volume-title":"2018 design, automation & test in Europe conference & exhibition (DATE)","author":"CY Chen","year":"2018","unstructured":"Chen CY, Choi J, Gopalakrishnan K, Srinivasan V, Venkataramani S (2018) Exploiting approximate computing for deep learning acceleration. In: 2018 design, automation & test in Europe conference & exhibition (DATE). IEEE, Dresden, pp 821\u2013826. https:\/\/doi.org\/10.23919\/DATE.2018.8342119"},{"key":"164_CR5","unstructured":"Howard AG, Zhu M, Chen B, Kalenichenko D, Wang W, Weyand T, Andreetto M, Adam H (2017) Mobilenets: efficient convolutional neural networks for mobile vision applications. arXiv preprint arXiv:1704.04861"},{"key":"164_CR6","doi-asserted-by":"publisher","unstructured":"Sandler M, Howard A, Zhu M, Zhmoginov A, Chen L-C (2018) MobileNetV2: Inverted residuals and linear bottlenecks. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (CVPR). IEEE,\u00a0Salt Lake City, pp 4510\u20134520. https:\/\/doi.org\/10.1109\/CVPR.2018.00474","DOI":"10.1109\/CVPR.2018.00474"},{"key":"164_CR7","doi-asserted-by":"publisher","first-page":"6848","DOI":"10.1109\/CVPR.2018.00716","volume-title":"Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (CVPR)","author":"X Zhang","year":"2018","unstructured":"Zhang X, Zhou X, Lin M, Sun J (2018) ShuffleNet: An extremely efficient convolutional neural network for mobile devices. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (CVPR). IEEE, Salt Lake City, pp 6848\u20136856. https:\/\/doi.org\/10.1109\/CVPR.2018.00716"},{"key":"164_CR8","series-title":"Lecture notes in computer science","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01264-9_8","volume-title":"Computer vision \u2013 ECCV 2018","author":"N Ma","year":"2018","unstructured":"Ma N, Zhang X, Zheng H-T, Sun J (2018) ShuffleNet V2: practical guidelines for efficient CNN architecture design. In: Ferrari V, Hebert M, Sminchisescu C, Weiss Y (eds) Computer vision \u2013 ECCV 2018, Lecture notes in computer science, vol 11218. Springer, Cham. https:\/\/doi.org\/10.1007\/978-3-030-01264-9_8"},{"key":"164_CR9","doi-asserted-by":"publisher","unstructured":"Han K, Wang Y, Tian Q, Guo J, Xu C, Xu C (2020) GhostNet: more features from cheap operations. In: Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (CVPR). IEEE,\u00a0Seattle, pp 1577\u20131586. https:\/\/doi.org\/10.1109\/CVPR42600.2020.00165","DOI":"10.1109\/CVPR42600.2020.00165"},{"issue":"12","key":"164_CR10","doi-asserted-by":"publisher","first-page":"2232","DOI":"10.1109\/JPROC.2020.3029453","volume":"108","author":"S Venkataramani","year":"2020","unstructured":"Venkataramani S, Sun X, Wang N, Chen CY, Choi J, Kang M, Agarwal A, Oh J, Jain S, Babinsky T, Cao N (2020) Efficient AI system design with cross-layer approximate computing. Proceedings of the IEEE. 108(12):2232\u20132250","journal-title":"Proceedings of the IEEE."},{"key":"164_CR11","doi-asserted-by":"publisher","unstructured":"Wang Y, Li H, Li X (2017) Real-time meets approximate computing: an elastic CNN inference accelerator with adaptive trade-off between QoS and QoR. In: Proceedings of the 54th ACM\/EDAC\/IEEE design automation conference (DAC). ACM, Austin, pp 1\u20136. https:\/\/doi.org\/10.1145\/3061639.3062307","DOI":"10.1145\/3061639.3062307"},{"issue":"4","key":"164_CR12","doi-asserted-by":"publisher","first-page":"50","DOI":"10.1109\/MM.2018.043191125","volume":"38","author":"Z Liu","year":"2018","unstructured":"Liu Z, Yazdanbakhsh A, Park T, Esmaeilzadeh H, Kim NS (2018) Simul: an algorithm-driven approximate multiplier design for machine learning. IEEE Micro 38(4):50\u201359","journal-title":"IEEE Micro"},{"key":"164_CR13","doi-asserted-by":"publisher","unstructured":"Zhang X, et al (2018) DNNBuilder: An automated tool for building high-performance DNN hardware accelerators for FPGAs. In: Proceedings of the 2018 IEEE\/ACM international conference on computer-aided design (ICCAD). ACM, pp 1\u20138. https:\/\/doi.org\/10.1145\/3240765.3240801","DOI":"10.1145\/3240765.3240801"},{"issue":"2","key":"164_CR14","doi-asserted-by":"publisher","first-page":"535","DOI":"10.1145\/3140659.3080221","volume":"45","author":"Y Shen","year":"2017","unstructured":"Shen Y, Ferdman M, Milder P (2017) Maximizing CNN accelerator efficiency through resource partitioning. ACM SIGARCH Comput Architect News 45(2):535\u2013547","journal-title":"ACM SIGARCH Comput Architect News"},{"key":"164_CR15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-60910-8","volume-title":"Embedded systems","author":"P Marwedel","year":"2021","unstructured":"Marwedel P (2021) Embedded system design: embedded systems foundations of cyber-physical systems, and the internet of things. In: Embedded systems, 4th edn. Springer, Cham. https:\/\/doi.org\/10.1007\/978-3-030-60910-8","edition":"4"},{"key":"164_CR16","doi-asserted-by":"publisher","first-page":"753","DOI":"10.1145\/996566.996771","volume-title":"Proceedings of the 41st design automation conference (DAC)","author":"P Kocher","year":"2004","unstructured":"Kocher P, Lee R, McGraw G, Raghunathan A, Ravi S (2004) Security as a new dimension in embedded system design. In: Proceedings of the 41st design automation conference (DAC). San Diego, ACM, pp 753\u2013760"},{"issue":"4","key":"164_CR17","doi-asserted-by":"publisher","first-page":"763","DOI":"10.3390\/electronics4040763","volume":"4","author":"Y Jin","year":"2015","unstructured":"Jin Y (2015) Introduction to hardware security. Electronics 4(4):763\u2013784","journal-title":"Electronics"},{"key":"164_CR18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-62707-2_1","volume-title":"Hardware supply chain security","author":"B Halak","year":"2021","unstructured":"Halak B (2021) CIST: a threat modelling approach for hardware supply chain security. In: Halak B (ed) Hardware supply chain security. Springer, Cham. https:\/\/doi.org\/10.1007\/978-3-030-62707-2_1"},{"key":"164_CR19","doi-asserted-by":"publisher","first-page":"46","DOI":"10.1109\/ICASI49664.2020.9426247","volume-title":"Proceedings of the 6th international conference on applied system innovation (ICASI)","author":"Y Nozaki","year":"2020","unstructured":"Nozaki Y, Takemoto S, Ikezaki Y, Yoshikawa M (2020) LUT oriented hardware Trojan for FPGA-based AI module. In: Proceedings of the 6th international conference on applied system innovation (ICASI). IEEE, Taitung, pp 46\u201349. https:\/\/doi.org\/10.1109\/ICASI49664.2020.9426247"},{"key":"164_CR20","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/VTS48691.2020.9107582","volume-title":"Proceedings of the 2020 IEEE 38th VLSI test symposium (VTS)","author":"Z Liu","year":"2020","unstructured":"Liu Z, Ye J, Hu X, Li H, Li X, Hu Y (2020) Sequence triggered hardware Trojan in neural network accelerator. In: Proceedings of the 2020 IEEE 38th VLSI test symposium (VTS). IEEE, San Diego, pp 1\u20136. https:\/\/doi.org\/10.1109\/VTS48691.2020.9107582"},{"key":"164_CR21","doi-asserted-by":"publisher","first-page":"68","DOI":"10.1109\/ATS.2018.00024","volume-title":"Proceedings of the 2018 IEEE 27th Asian test symposium (ATS).","author":"J Ye","year":"2018","unstructured":"Ye J, Hu Y, Li X (2018) Hardware Trojan in FPGA CNN accelerator. In: Proceedings of the 2018 IEEE 27th Asian test symposium (ATS). IEEE, Hefei, pp 68\u201373. https:\/\/doi.org\/10.1109\/ATS.2018.00024"},{"key":"164_CR22","doi-asserted-by":"publisher","unstructured":"Odetola TA, Mohammed HR, Hasan SR (2019) A stealthy hardware Trojan exploiting the architectural vulnerability of deep learning architectures: input interception attack (IIA). arXiv preprint arXiv:1911.00783. https:\/\/doi.org\/10.48550\/arXiv.1911.00783","DOI":"10.48550\/arXiv.1911.00783"},{"key":"164_CR23","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/ICSICT49897.2020.9278162","volume-title":"Proceedings of the 2020 IEEE 15th international conference on solid-state & integrated circuit technology (ICSICT)","author":"C Yang","year":"2020","unstructured":"Yang C, Hou J, Wu M, Mei K, Geng L (2020) Hardware Trojan attacks on the reconfigurable interconnections of convolutional neural networks accelerators. In: Proceedings of the 2020 IEEE 15th international conference on solid-state & integrated circuit technology (ICSICT). IEEE, Kunming, pp 1\u20133. https:\/\/doi.org\/10.1109\/ICSICT49897.2020.9278162"},{"key":"164_CR24","doi-asserted-by":"crossref","unstructured":"Clements J, Lao Y (2018) Hardware Trojan attacks on neural networks. arXiv preprint arXiv:1806.05768","DOI":"10.1109\/GlobalSIP.2018.8646335"},{"issue":"12","key":"164_CR25","doi-asserted-by":"publisher","first-page":"1778","DOI":"10.1109\/TCAD.2014.2356453","volume":"33","author":"K Xiao","year":"2014","unstructured":"Xiao K, Forte D, Tehranipoor M (2014) A novel built-in self-authentication technique to prevent inserting hardware Trojans. IEEE Trans Comput Aided Des Integr Circuits Syst 33(12):1778\u20131791","journal-title":"IEEE Trans Comput Aided Des Integr Circuits Syst"},{"key":"164_CR26","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/2897937.2898034","volume-title":"Proceedings of the 2016 53rd ACM\/EDAC\/IEEE design automation conference (DAC)","author":"STC Konigsmark","year":"2016","unstructured":"Konigsmark STC, Chen D, MDF W (2016) Information dispersion for Trojan defense through high-level synthesis. In: Proceedings of the 2016 53rd ACM\/EDAC\/IEEE design automation conference (DAC). ACM, Austin, pp 1\u20136. https:\/\/doi.org\/10.1145\/2897937.2898034"},{"key":"164_CR27","doi-asserted-by":"publisher","unstructured":"Ngo XT, Guilley S, Bhasin S, Danger JL, Najm Z (2014) Encoding the state of integrated circuits: a proactive and reactive protection against hardware Trojan horses. In: Proceedings of the 9th workshop on embedded systems security (WESS \u201914). ACM, New Delhi. Article No. 7, 10 pages. https:\/\/doi.org\/10.1145\/2668322.2668329","DOI":"10.1145\/2668322.2668329"},{"key":"164_CR28","doi-asserted-by":"publisher","first-page":"82","DOI":"10.1109\/HST.2015.7140242","volume-title":"Proceedings of the 2015 IEEE international symposium on hardware oriented security and trust (HOST)","author":"XT Ngo","year":"2015","unstructured":"Ngo XT, Bhasin S, Danger JL, Guilley S, Najm Z (2015) Linear complementary dual code improvement to strengthen encoded circuit against hardware Trojan horses. In: Proceedings of the 2015 IEEE international symposium on hardware oriented security and trust (HOST). IEEE, Washington, DC, pp 82\u201387. https:\/\/doi.org\/10.1109\/HST.2015.7140242"},{"key":"164_CR29","doi-asserted-by":"publisher","unstructured":"Hicks M, Finnicum M, King ST, Martin MMK, Smith JM (2010) Overcoming an untrusted computing base: detecting and removing malicious hardware automatically. In: Proceedings of the 2010 IEEE symposium on security and privacy (S&P). IEEE, Oakland, CA pp 159\u2013172. https:\/\/doi.org\/10.1109\/SP.2010.18","DOI":"10.1109\/SP.2010.18"},{"key":"164_CR30","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/DDECS.2016.7482481","volume-title":"Proceedings of the 2016 IEEE 19th international symposium on design and diagnostics of electronic circuits & systems (DDECS)","author":"AG Voyiatzis","year":"2016","unstructured":"Voyiatzis AG, Stefanidis KG, Kitsos P (2016) Efficient triggering of Trojan hardware logic. In: Proceedings of the 2016 IEEE 19th international symposium on design and diagnostics of electronic circuits & systems (DDECS). IEEE, Kosice, pp 1\u20136. https:\/\/doi.org\/10.1109\/DDECS.2016.7482481"},{"issue":"2","key":"164_CR31","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1109\/MDAT.2017.2766170","volume":"35","author":"S Dupuis","year":"2017","unstructured":"Dupuis S, Flottes M-L, Di Natale G, Rouzeyre B (2017) Protection against hardware Trojans with logic testing: proposed solutions and challenges ahead. IEEE Design & Test 35(2):73\u201390","journal-title":"IEEE Design & Test"},{"issue":"4","key":"164_CR32","doi-asserted-by":"publisher","first-page":"499","DOI":"10.1016\/j.jare.2013.11.008","volume":"5","author":"HA Amin","year":"2014","unstructured":"Amin HA, Alkabani Y, Selim GM (2014) System-level protection and hardware Trojan detection using weighted voting. J Adv Res 5(4):499\u2013505","journal-title":"J Adv Res"},{"issue":"100","key":"164_CR33","doi-asserted-by":"publisher","DOI":"10.1016\/j.micpro.2023.104827","volume":"1","author":"TA Odetola","year":"2023","unstructured":"Odetola TA, Adeyemo A, Khalid F, Hasan SR (2023) Fm-modcomp: Feature map modification and hardware\u2013software cocomparison for secure hardware accelerator-based CNN inference. Microprocess Microsyst 1(100):104827","journal-title":"Microprocess Microsyst"},{"key":"164_CR34","doi-asserted-by":"publisher","unstructured":"Javaheripi M, Samragh M, Fields G, Javidi T, Koushanfar F (2020) CleaNN: accelerated Trojan shield for embedded neural networks. In: Proceedings of the 39th international conference on computer-aided design (ICCAD '20). Virtual Event, ACM, Article No. 11, 9 pages. https:\/\/doi.org\/10.1145\/3400302.3415671","DOI":"10.1145\/3400302.3415671"},{"key":"164_CR35","doi-asserted-by":"publisher","first-page":"449","DOI":"10.1145\/3394885.3431639","volume-title":"Proceedings of the 26th Asia and South Pacific design automation conference (ASPDAC '21)","author":"Q Xu","year":"2021","unstructured":"Xu Q, Arafin MT, Qu G (2021) Security of neural networks from hardware perspective: a survey and beyond. In: Proceedings of the 26th Asia and South Pacific design automation conference (ASPDAC '21). ACM, Tokyo, pp 449\u2013454. https:\/\/doi.org\/10.1145\/3394885.3431639"},{"key":"164_CR36","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/SOCC56010.2022.9908104","volume-title":"Proceedings of the 2022 IEEE 35th international system-on-chip conference (SOCC)","author":"P Sun","year":"2022","unstructured":"Sun P, Halak B, Kazmierski T (2022) Towards hardware Trojan resilient design of convolutional neural networks. In: Proceedings of the 2022 IEEE 35th international system-on-chip conference (SOCC). IEEE, Belfast, pp 1\u20136. https:\/\/doi.org\/10.1109\/SOCC56010.2022.9908104"},{"key":"164_CR37","doi-asserted-by":"publisher","first-page":"259","DOI":"10.1109\/ASP-DAC47756.2020.9045385","volume-title":"Proceedings of the 2020 25th Asia and South pacific design automation conference (ASP-DAC)","author":"P Yellu","year":"2020","unstructured":"Yellu P, Monjur MR, Kammerer T, Xu D, Yu Q (2020) Security threats and countermeasures for approximate arithmetic computing. In: Proceedings of the 2020 25th Asia and South pacific design automation conference (ASP-DAC). IEEE, Beijing, pp 259\u2013264. https:\/\/doi.org\/10.1109\/ASP-DAC47756.2020.9045385"},{"key":"164_CR38","doi-asserted-by":"publisher","first-page":"327","DOI":"10.1145\/3386263.3407593","volume-title":"Proceedings of the 2020 on Great Lakes Symposium on VLSI (GLSVLSI). Virtual event, China","author":"P Yellu","year":"2020","unstructured":"Yellu P, Buell L, Xu D, Yu Q (2020) Blurring boundaries: a new way to secure approximate computing systems. In: Proceedings of the 2020 on Great Lakes Symposium on VLSI (GLSVLSI). Virtual event, China. ACM, pp 327\u2013332. https:\/\/doi.org\/10.1145\/3386263.3407593"},{"key":"164_CR39","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3240765.3243497","volume-title":"Proceedings of the 2018 IEEE\/ACM international conference on computer-aided design (ICCAD)","author":"F Regazzoni","year":"2018","unstructured":"Regazzoni F, Alippi C, Polian I (2018) Security: the dark side of approximate computing? In: Proceedings of the 2018 IEEE\/ACM international conference on computer-aided design (ICCAD). ACM, San Diego, pp 1\u20136. https:\/\/doi.org\/10.1145\/3240765.3243497"},{"key":"164_CR40","doi-asserted-by":"publisher","unstructured":"Keshavarz S, Holcomb D (2017) Privacy leakages in approximate adders. In: Proceedings of the 2017 IEEE international symposium on circuits and systems (ISCAS). IEEE, Baltimore, MD, pp 1\u20134. https:\/\/doi.org\/10.1109\/ISCAS.2017.8050882","DOI":"10.1109\/ISCAS.2017.8050882"},{"issue":"5","key":"164_CR41","doi-asserted-by":"publisher","first-page":"1161","DOI":"10.1109\/TVLSI.2018.2890712","volume":"27","author":"S Vahdat","year":"2019","unstructured":"Vahdat S, Kamal M, Afzali-Kusha A, Pedram M (2019) TOSAM: an energy-efficient truncation- and rounding-based scalable approximate multiplier. IEEE Trans Very Large Scale Integr (VLSI) Syst 27(5):1161\u20131173. https:\/\/doi.org\/10.1109\/TVLSI.2018.2890712","journal-title":"IEEE Trans Very Large Scale Integr (VLSI) Syst"},{"issue":"2","key":"164_CR42","doi-asserted-by":"publisher","first-page":"131","DOI":"10.1007\/s41635-018-0037-2","volume":"2","author":"V Venugopalan","year":"2018","unstructured":"Venugopalan V, Patterson CD (2018) Surveying the hardware Trojan threat landscape for the internet-of-things. J Hardware Syst Secur 2(2):131\u2013141","journal-title":"J Hardware Syst Secur"},{"issue":"8","key":"164_CR43","doi-asserted-by":"publisher","first-page":"1229","DOI":"10.1109\/JPROC.2014.2334493","volume":"102","author":"S Bhunia","year":"2014","unstructured":"Bhunia S, Hsiao MS, Banga M, Narasimhan S (2014) Hardware Trojan attacks: threat analysis and countermeasures. Proc IEEE 102(8):1229\u20131247","journal-title":"Proc IEEE"},{"key":"164_CR44","doi-asserted-by":"crossref","unstructured":"Clements J, Lao Y (2018) Hardware Trojan attacks on neural networks[J]. arXiv preprint arXiv:1806.05768","DOI":"10.1109\/ISCAS.2019.8702493"},{"issue":"6","key":"164_CR45","doi-asserted-by":"publisher","first-page":"231","DOI":"10.1049\/iet-cdt.2020.0041","volume":"14","author":"M Xue","year":"2020","unstructured":"Xue M, Gu C, Liu W et al (2020) Ten years of hardware Trojans: a survey from the attacker\u2019s perspective[J]. IET Comput Digital Tech 14(6):231\u2013246","journal-title":"IET Comput Digital Tech"},{"issue":"3","key":"164_CR46","doi-asserted-by":"publisher","first-page":"165","DOI":"10.1007\/s10617-023-09274-8","volume":"27","author":"RMR Yanamala","year":"2023","unstructured":"Yanamala RMR, Pullakandam M (2023) A high-speed reusable quantized hardware accelerator design for CNN on constrained edge device[J]. Des Autom Embed Syst 27(3):165\u2013189","journal-title":"Des Autom Embed Syst"},{"issue":"6","key":"164_CR47","doi-asserted-by":"publisher","first-page":"1050","DOI":"10.3390\/electronics13061050","volume":"13","author":"J He","year":"2024","unstructured":"He J, Zhang M, Xu J et al (2024) Optimizing CNN hardware acceleration with configurable vector units and feature layout strategies[J]. Electronics 13(6):1050","journal-title":"Electronics"},{"issue":"11","key":"164_CR48","doi-asserted-by":"publisher","first-page":"20357","DOI":"10.1109\/JIOT.2024.3369607","volume":"11","author":"PD Rosero-Montalvo","year":"2024","unstructured":"Rosero-Montalvo PD, T\u00f6z\u00fcn P, Hernandez W (2024) Optimized CNN architectures benchmarking in hardware-constrained edge devices in IoT environments. IEEE Internet Things J 11(11):20357\u201320366. https:\/\/doi.org\/10.1109\/JIOT.2024.3369607","journal-title":"IEEE Internet Things J"},{"key":"164_CR49","first-page":"161","volume-title":"Proceedings of the. ACM\/SIGDA international symposium field-program gate arrays","author":"C Zhang","year":"2015","unstructured":"Zhang C, Li P, Sun G et al (2015) Optimizing FPGA-based accelerator design for deep convolutional neural networks. In: Proceedings of the. ACM\/SIGDA international symposium field-program gate arrays, vol 2015, pp 161\u2013170"},{"issue":"8","key":"164_CR50","doi-asserted-by":"publisher","first-page":"1874","DOI":"10.1109\/TVLSI.2019.2913958","volume":"27","author":"X Lian","year":"2019","unstructured":"Lian X, Liu Z, Song Z, Dai J, Zhou W, Ji X (2019) High-performance FPGA-based CNN accelerator with block-floating-point arithmetic. IEEE Trans Very Large Scale Integr (VLSI) Syst 27(8):1874\u20131885","journal-title":"IEEE Trans Very Large Scale Integr (VLSI) Syst"},{"key":"164_CR51","doi-asserted-by":"publisher","first-page":"116569","DOI":"10.1109\/ACCESS.2020.3004198","volume":"8","author":"Z Wang","year":"2020","unstructured":"Wang Z, Xu K, Wu S et al (2020) Sparse-YOLO: hardware\/software co-design of an FPGA accelerator for YOLOv2[J]. IEEE Access 8:116569\u2013116585","journal-title":"IEEE Access"},{"issue":"8","key":"164_CR52","doi-asserted-by":"publisher","first-page":"4069","DOI":"10.1109\/TNNLS.2021.3055814","volume":"33","author":"W Huang","year":"2021","unstructured":"Huang W, Wu H, Chen Q et al (2021) FPGA-based high-throughput CNN hardware accelerator with high computing resource utilization ratio[J]. IEEE Transact Neur Network Learn Syst 33(8):4069\u20134083","journal-title":"IEEE Transact Neur Network Learn Syst"}],"container-title":["Journal of Hardware and Systems Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s41635-025-00164-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s41635-025-00164-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s41635-025-00164-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,27]],"date-time":"2025-11-27T10:31:24Z","timestamp":1764239484000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s41635-025-00164-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8,1]]},"references-count":52,"journal-issue":{"issue":"3-4","published-print":{"date-parts":[[2025,12]]}},"alternative-id":["164"],"URL":"https:\/\/doi.org\/10.1007\/s41635-025-00164-y","relation":{},"ISSN":["2509-3428","2509-3436"],"issn-type":[{"value":"2509-3428","type":"print"},{"value":"2509-3436","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,8,1]]},"assertion":[{"value":"1 February 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 July 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 August 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"There was no involvement of humans or animals in this study. We give consent to Springer to publish this paper.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical Approval"}},{"value":"The authors declare no competing interests.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}]}}