{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,21]],"date-time":"2026-07-21T14:27:09Z","timestamp":1784644029510,"version":"3.55.0"},"reference-count":25,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,12,5]],"date-time":"2021-12-05T00:00:00Z","timestamp":1638662400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,12,5]],"date-time":"2021-12-05T00:00:00Z","timestamp":1638662400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,12,5]],"date-time":"2021-12-05T00:00:00Z","timestamp":1638662400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100010002","name":"Ministry of Education","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100010002","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,12,5]]},"DOI":"10.1109\/dac18074.2021.9586199","type":"proceedings-article","created":{"date-parts":[[2021,11,8]],"date-time":"2021-11-08T23:30:34Z","timestamp":1636414234000},"page":"1255-1260","source":"Crossref","is-referenced-by-count":16,"title":["SEALing Neural Network Models in Encrypted Deep Learning Accelerators"],"prefix":"10.1109","author":[{"given":"Pengfei","family":"Zuo","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yu","family":"Hua","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ling","family":"Liang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xinfeng","family":"Xie","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xing","family":"Hu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuan","family":"Xie","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/DAC.2018.8465773"},{"key":"ref11","author":"krizhevsky","year":"2009","journal-title":"Learning multiple layers of features from tiny images"},{"key":"ref12","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2016","journal-title":"arXiv preprint arXiv 1607 02533"},{"key":"ref13","article-title":"Pruning filters for efficient convnets","author":"li","year":"2017","journal-title":"Proceedings of the International Conference on Learning Representations (ICLR)"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2011.251"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/VLSIC.2010.5560310"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TVLSI.2004.830936"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243831"},{"key":"ref18","year":"2012","journal-title":"NVIDIA GeForce GTX 480"},{"key":"ref19","year":"2012","journal-title":"Tiny AES"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3134599"},{"key":"ref3","year":"2020","journal-title":"Advanced encryption standard cryptographic ip"},{"key":"ref6","article-title":"A memory encryption engine suitable for general purpose processors","author":"gueron","year":"2016","journal-title":"Cryptology ePrint Archive Report 2016\/204"},{"key":"ref5","article-title":"Generative adversarial nets","author":"goodfellow","year":"2014","journal-title":"Advances in Neural IInformation Processing Systems"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2015.123"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2020.3017870"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378460"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ISPASS.2009.4919648"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref22","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2014","journal-title":"Proceedings of the International Conference on Learning Representations (ICLR)"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2014.7001346"},{"key":"ref24","doi-asserted-by":"crossref","DOI":"10.1145\/1150019.1136502","article-title":"Improving cost, performance, and security of memory encryption and authentication","author":"yan","year":"2006","journal-title":"Proceedings of the 33rd Annual International Symposium on Computer Architecture (ISCA)"},{"key":"ref23","article-title":"Graviton: Trusted execution environments on GPUs","author":"volos","year":"2018","journal-title":"Proceedings of the USENIX Symposium on Operating Systems Design and Implementation (OSDI'02)"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3352460.3358290"}],"event":{"name":"2021 58th ACM\/IEEE Design Automation Conference (DAC)","location":"San Francisco, CA, USA","start":{"date-parts":[[2021,12,5]]},"end":{"date-parts":[[2021,12,9]]}},"container-title":["2021 58th ACM\/IEEE Design Automation Conference (DAC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9585997\/9586083\/09586199.pdf?arnumber=9586199","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T16:55:51Z","timestamp":1652201751000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9586199\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,12,5]]},"references-count":25,"URL":"https:\/\/doi.org\/10.1109\/dac18074.2021.9586199","relation":{},"subject":[],"published":{"date-parts":[[2021,12,5]]}}}