{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T06:07:05Z","timestamp":1784182025642,"version":"3.55.0"},"reference-count":52,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T00:00:00Z","timestamp":1777852800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T00:00:00Z","timestamp":1777852800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,4]]},"DOI":"10.1109\/host68814.2026.11604785","type":"proceedings-article","created":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T20:02:14Z","timestamp":1784145734000},"page":"273-284","source":"Crossref","is-referenced-by-count":0,"title":["AdvProtego: A Unified Framework to Safeguard Deep Learning Models Against Side Channel Leakage"],"prefix":"10.1109","author":[{"given":"Xiaobei","family":"Yan","sequence":"first","affiliation":[{"name":"Nanyang Technological University,Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chip Hong","family":"Chang","sequence":"additional","affiliation":[{"name":"Nanyang Technological University,Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shangwei","family":"Guo","sequence":"additional","affiliation":[{"name":"Chongqing University,China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tianwei","family":"Zhang","sequence":"additional","affiliation":[{"name":"National Integrated Centre for Evaluation (NiCE),Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.44"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33481-8_9"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66787-4_3"},{"key":"ref5","volume-title":"Fpga implementation of a deep learning inference accelerator for autonomous vehicles","author":"Cesarano"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00235"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/JETCAS.2021.3077887"},{"key":"ref8","first-page":"1310","article-title":"Certified adversarial robustness via randomized smoothing","volume-title":"international conference on machine learning","author":"Cohen"},{"key":"ref9","first-page":"1","article-title":"Bomanet: Boolean masking of an entire neural network","volume-title":"Proceedings of the 39th International Conference on Computer-Aided Design","author":"Dubey"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3465377"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ISVLSI.2012.54"},{"key":"ref12","article-title":"Explaining and harnessing adversarial examples","author":"Ian","year":"2014","journal-title":"arXiv preprint arXiv"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ReConFig48160.2019.8994789"},{"key":"ref14","article-title":"Caltech-256 object category dataset. Technical report","volume-title":"Technical Report 7694, California Institute of Technology Pasadena","author":"Griffin","year":"2007"},{"key":"ref15","article-title":"Adversarial attack based countermeasures against deep learning side-channel attacks","author":"Gu","year":"2020","journal-title":"arXiv preprint arXiv"},{"key":"ref16","article-title":"Countering adversarial images using input transformations","author":"Guo","year":"2017","journal-title":"arXiv preprint arXiv"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3453688.3461481"},{"key":"ref18","article-title":"Ai attacks ai: Recovering neural network architecture from nvdla using ai-assisted side channel attack","volume-title":"Cryptology ePrint Archive, Paper 2023\/368","author":"Gupta","year":"2023"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICCE-TW52618.2021.9603186"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378460"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/DAC.2018.8465773"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3464458.3464459"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD45719.2019.8942094"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/HOST49136.2021.9702279"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2016.7446082"},{"key":"ref26","article-title":"Naspy: Automated extraction of automated machine learning models","volume-title":"International Conference on Learning Representations","author":"Lou"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/FCCM53951.2022.9786112"},{"key":"ref28","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017","journal-title":"arXiv preprint arXiv"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-12-815480-9.00015-3"},{"key":"ref30","first-page":"379","article-title":"Designing neural networks using genetic algorithms","volume":"89","author":"Geoffrey","year":"1989","journal-title":"ICGA"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.23919\/DATE51398.2021.9473915"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813706"},{"key":"ref33","volume-title":"Shield: An adaptive and lightweight defense against the remote power side-channel attacks on multi-tenant fpgas","author":"Ahmadi","year":"2023"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/3656019.3676952"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363284"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA52012.2021.00074"},{"key":"ref37","article-title":"Adversarial ml problems are getting harder to solve and to evaluate","author":"Rando","year":"2025","journal-title":"arXiv preprint arXiv"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.3390\/cryptography4020015"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/IC2E.2018.00025"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-01957-9_30"},{"key":"ref41","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013","journal-title":"arXiv preprint arXiv"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/FCCM51124.2021.00037"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/1250662.1250723"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274696"},{"key":"ref45","article-title":"Mitigating adversarial effects through randomization","author":"Xie","year":"2017","journal-title":"arXiv preprint arXiv"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICFPT59805.2023.00026"},{"key":"ref47","article-title":"Programmable ro (pro): A multipurpose countermeasure against side-channel and fault injection attack","author":"Yao","year":"2021","journal-title":"arXiv preprint arXiv"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3489517.3530494"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52729.2023.01575"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00049"},{"key":"ref51","first-page":"1","article-title":"Obfunas: A neural architecture search-based dnn obfuscation approach","volume-title":"Proceedings of the 41st IEEE\/ACM International Conference on Computer-Aided Design","author":"Zhou"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978324"},{"key":"ref53","article-title":"Neural architecture search with reinforcement learning","author":"Zoph","year":"2016","journal-title":"arXiv preprint arXiv"}],"event":{"name":"2026 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","location":"Washington, DC, USA","start":{"date-parts":[[2026,5,4]]},"end":{"date-parts":[[2026,5,7]]}},"container-title":["2026 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11604575\/11604182\/11604785.pdf?arnumber=11604785","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T05:27:08Z","timestamp":1784179628000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11604785\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,4]]},"references-count":52,"URL":"https:\/\/doi.org\/10.1109\/host68814.2026.11604785","relation":{},"subject":[],"published":{"date-parts":[[2026,5,4]]}}}