{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T01:21:14Z","timestamp":1740100874097,"version":"3.37.3"},"reference-count":34,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,6,13]],"date-time":"2022-06-13T00:00:00Z","timestamp":1655078400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,6,13]],"date-time":"2022-06-13T00:00:00Z","timestamp":1655078400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1953285"],"award-info":[{"award-number":["1953285"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,6,13]]},"DOI":"10.1109\/aicas54282.2022.9869995","type":"proceedings-article","created":{"date-parts":[[2022,9,5]],"date-time":"2022-09-05T20:21:42Z","timestamp":1662409302000},"page":"312-315","source":"Crossref","is-referenced-by-count":1,"title":["A Survey on Side-Channel-based Reverse Engineering Attacks on Deep Neural Networks"],"prefix":"10.1109","author":[{"given":"Yuntao","family":"Liu","sequence":"first","affiliation":[{"name":"University of Maryland,College Park"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michael","family":"Zuzak","sequence":"additional","affiliation":[{"name":"University of Maryland,College Park"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Daniel","family":"Xing","sequence":"additional","affiliation":[{"name":"University of Maryland,College Park"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Isaac","family":"McDaniel","sequence":"additional","affiliation":[{"name":"University of Maryland,College Park"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Priya","family":"Mittu","sequence":"additional","affiliation":[{"name":"University of Maryland,College Park"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Olsan","family":"Ozbay","sequence":"additional","affiliation":[{"name":"University of Maryland,College Park"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Abir","family":"Akib","sequence":"additional","affiliation":[{"name":"University of Maryland,College Park"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ankur","family":"Srivastava","sequence":"additional","affiliation":[{"name":"University of Maryland,College Park"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref33","article-title":"Test vector leakage assessment (tvla) derived test requirements (dtr) with aes","author":"becker","year":"2013","journal-title":"International Cryptographic Module Conference"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3400302.3415649"},{"key":"ref31","article-title":"Stealing neural networks via timing side channels","author":"duddu","year":"2018","journal-title":"ArXiv Preprint"},{"key":"ref30","first-page":"515","article-title":"{CSI}{NN}: Reverse engineering of neural network architectures through electromagnetic side channel","author":"batina","year":"2019","journal-title":"28th USENIX Security Symposium (USENIX Security 19)"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0025"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/s41635-017-0025-y"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2980522"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-018-0411-7"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3176258.3176320"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.3390\/app10030984"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00022"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/FMEC.2018.8364038"},{"key":"ref17","article-title":"Partitioned cache architecture as a side-channel defence mechanism","author":"page","year":"2005","journal-title":"Cryptology EPrint Archive Report 2005\/280"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1250662.1250723"},{"key":"ref19","first-page":"189","article-title":"{STEALTHMEM}: System-level protection against cache-based side channel attacks in the cloud","author":"kim","year":"2012","journal-title":"21st USENIX Security Symposium ( USENIX Security 12)"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274696"},{"key":"ref4","first-page":"719","article-title":"Flush+ reload: a high resolution, low noise, 13 cache side-channel attack","author":"yarom","year":"2014","journal-title":"23rd USENIX Security Symposium ( USENIX Security 14)"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3310273.3323070"},{"key":"ref3","article-title":"Security analysis of deep neural networks operating in the presence of cache side-channel attacks","author":"hong","year":"2018","journal-title":"ArXiv Preprint"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3411495.3421356"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/HOST45689.2020.9300276"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.11"},{"key":"ref8","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2014","journal-title":"ArXiv Preprint"},{"key":"ref7","first-page":"1097","article-title":"Imagenet classification with deep convolutional neural networks","author":"krizhevsky","year":"2012","journal-title":"Advances in Neural Infor-Mation Processing Systems"},{"key":"ref2","article-title":"Cache telepathy: Leveraging shared resource attacks to learn DNN architectures","author":"yan","year":"2020","journal-title":"29th USENIX Security Symposium (USENIX Security 20)"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-78372-3_14"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978324"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2046660.2046671"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA.2012.6237011"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48063.2020.00031"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_12"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ISVLSI.2019.00122"},{"key":"ref25","first-page":"4","article-title":"Reverse engineering convolutional neural networks through side-channel information leaks","author":"hua","year":"2018","journal-title":"Proceedings of the 55th Annual Design Automation Conference"}],"event":{"name":"2022 IEEE 4th International Conference on Artificial Intelligence Circuits and Systems (AICAS)","start":{"date-parts":[[2022,6,13]]},"location":"Incheon, Korea, Republic of","end":{"date-parts":[[2022,6,15]]}},"container-title":["2022 IEEE 4th International Conference on Artificial Intelligence Circuits and Systems (AICAS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9869844\/9869845\/09869995.pdf?arnumber=9869995","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,26]],"date-time":"2022-09-26T21:01:33Z","timestamp":1664226093000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9869995\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,6,13]]},"references-count":34,"URL":"https:\/\/doi.org\/10.1109\/aicas54282.2022.9869995","relation":{},"subject":[],"published":{"date-parts":[[2022,6,13]]}}}