{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,14]],"date-time":"2026-01-14T01:13:41Z","timestamp":1768353221732,"version":"3.49.0"},"reference-count":68,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"Faculty Research Grant from Tennessee Tech University\u2019s Office of Research and Center of Manufacturing Research"},{"DOI":"10.13039\/100000001","name":"NSF","doi-asserted-by":"publisher","award":["CNS-1852126"],"award-info":[{"award-number":["CNS-1852126"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3241096","type":"journal-article","created":{"date-parts":[[2023,2,6]],"date-time":"2023-02-06T19:13:26Z","timestamp":1675710806000},"page":"10520-10534","source":"Crossref","is-referenced-by-count":10,"title":["StAIn: Stealthy Avenues of Attacks on Horizontally Collaborated Convolutional Neural Network Inference and Their Mitigation"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2897-1138","authenticated-orcid":false,"given":"Adewale A.","family":"Adeyemo","sequence":"first","affiliation":[{"name":"Department of Electrical and Computer Engineering, Tennessee Technological University, Cookeville, TN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jonathan J.","family":"Sanderson","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Tennessee Technological University, Cookeville, TN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tolulope A.","family":"Odetola","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Tennessee Technological University, Cookeville, TN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6263-674X","authenticated-orcid":false,"given":"Faiq","family":"Khalid","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering, Vienna University of Technology, Wien, Austria"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0183-8086","authenticated-orcid":false,"given":"Syed Rafay","family":"Hasan","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Tennessee Technological University, Cookeville, TN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ISNCC49221.2020.9297344"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/s42979-021-00954-5"},{"key":"ref3","article-title":"Adversarial training for free!","author":"Shafahi","year":"2019","journal-title":"arXiv:1904.12843"},{"key":"ref4","volume-title":"Experimental Security Research of Tesla Autopilot NT","year":"2019"},{"key":"ref5","article-title":"Fooling a real car with adversarial traffic signs","author":"Morgulis","year":"2019","journal-title":"arXiv:1907.00374"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i04.5816"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2020.3042320"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/HPCC-SmartCity-DSS50907.2020.00078"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TWC.2019.2946140"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TGCN.2021.3111731"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICC42927.2021.9500513"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3010258"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.2986015"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2019.00148"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/HPCC-SmartCity-DSS50907.2020.00086"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2017.7927211"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2018.2858384"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2020.2970550"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SEC.2018.00016"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2017.226"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD50377.2020.00053"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2017.8203852"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS48785.2022.9937326"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.23919\/EUSIPCO.2018.8553560"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2017.8203770"},{"key":"ref27","article-title":"ML-leaks: Model and data independent membership inference attacks and defenses on machine learning models","author":"Salem","year":"2018","journal-title":"arXiv:1806.01246"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00509"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/DAC.2018.8465773"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3104520"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/MWSCAS47672.2021.9531833"},{"key":"ref32","article-title":"How secure is distributed convolutional neural network on IoT edge devices?","author":"Mohammed","year":"2020","journal-title":"arXiv:2006.09276"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/MDAT.2019.2961325"},{"key":"ref34","article-title":"Dynamic routing between capsules","author":"Sabour","year":"2017","journal-title":"arXiv:1710.09829"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-1465-4_21"},{"key":"ref36","article-title":"Exploiting vulnerabilities in deep neural networks: Adversarial and fault-injection attacks","author":"Khalid","year":"2021","journal-title":"arXiv:2105.03251"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2018.8342120"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/IOLTS.2018.8474192"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS51556.2021.9401166"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3093337.3037698"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2018.2842097"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1207\/s15327051hci0302_1"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-45541-5_2"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/IOLTS.2019.8854377"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2019.8715141"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00669"},{"key":"ref47","article-title":"HASI: Hardware-accelerated stochastic inference, a defense against adversarial machine learning attacks","author":"Samavatian","year":"2021","journal-title":"arXiv:2106.05825"},{"key":"ref48","article-title":"Featurized bidirectional GAN: Adversarial defense via adversarially learned semantic inference","author":"Bao","year":"2018","journal-title":"arXiv:1805.07862"},{"key":"ref49","article-title":"Gradient masking causes CLEVER to overestimate adversarial perturbation size","author":"Goodfellow","year":"2018","journal-title":"arXiv:1804.07870"},{"key":"ref50","article-title":"Ensemble adversarial training: Attacks and defenses","author":"Tram\u00e8r","year":"2017","journal-title":"arXiv:1705.07204"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00044"},{"key":"ref52","article-title":"Adversarial weight perturbation helps robust generalization","author":"Wu","year":"2020","journal-title":"arXiv:2004.05884"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2015.7120015"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1016\/j.eng.2019.12.012"},{"key":"ref55","article-title":"Maximal jacobian-based saliency map attack","author":"Wiyatno","year":"2018","journal-title":"arXiv:1808.07945"},{"key":"ref56","article-title":"Mathematical analysis of adversarial attacks","author":"Dou","year":"2018","journal-title":"arXiv:1811.06492"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/s11063-021-10707-3"},{"key":"ref58","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv:1706.06083"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/MCE.2020.2969150"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413604"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-22312-0_2"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.01171"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2019.00681"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2020.12.042"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i8.16908"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/HOST54066.2022.9840017"},{"key":"ref67","volume-title":"LeNet-5, Convolutional Neural Networks","author":"LeCun","year":"2015"},{"key":"ref68","article-title":"Very deep convolutional networks for large-scale image recognition","author":"Simonyan","year":"2014","journal-title":"arXiv:1409.1556"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10032539.pdf?arnumber=10032539","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,13]],"date-time":"2024-02-13T11:00:48Z","timestamp":1707822048000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10032539\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":68,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3241096","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}