{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T06:09:09Z","timestamp":1784182149896,"version":"3.55.0"},"reference-count":57,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T00:00:00Z","timestamp":1777852800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T00:00:00Z","timestamp":1777852800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,4]]},"DOI":"10.1109\/host68814.2026.11604810","type":"proceedings-article","created":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T20:02:14Z","timestamp":1784145734000},"page":"285-296","source":"Crossref","is-referenced-by-count":0,"title":["Double Strike: Breaking Approximation-Based Side-Channel Countermeasures for DNNs"],"prefix":"10.1109","author":[{"given":"Lorenzo","family":"Casalino","sequence":"first","affiliation":[{"name":"CentraleSupélec, Inria, IRISA, CNRS"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Maria M\u00e9ndez","family":"Real","sequence":"additional","affiliation":[{"name":"Univ. Bretagne-Sud, UMR 6285,Lab-STICC"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jean-Christophe","family":"Pr\u00e9votet","sequence":"additional","affiliation":[{"name":"Univ. Rennes,INSA Rennes, CNRS, IETR-UMR 6164"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rub\u00e9n","family":"Salvador","sequence":"additional","affiliation":[{"name":"CentraleSupélec, Inria, IRISA, CNRS"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","author":"Singh","journal-title":"Deep Learning in the Automotive Industry: Recent Advances and Application Examples"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.ecoinf.2023.102217"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1093\/bib\/bbx044"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3569577"},{"key":"ref5","volume-title":"How to train tensorflow models using gpus","author":"Savitsina","year":"2017"},{"key":"ref6","volume-title":"How much does it cost to train frontier ai models?","author":"Cottier","year":"2025"},{"key":"ref7","volume-title":"Ai me to the moon\u2026 carbon footprint for \u2018training gpt3\u2019 same as driving to our natural satellite and back","author":"Quach","year":"2020"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3605764.3623903"},{"key":"ref9","author":"Coqueret","year":"2024","journal-title":"A Hard-Label Cryptanalytic Extraction of Non-Fully Connected Deep Neural Networks using Side-Channel Attacks"},{"key":"ref10","first-page":"515","article-title":"\\{CSI\\}\\{NN\\}: Reverse engineering of neural network architectures through electromagnetic side channel","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Batina","year":"2019"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-25319-5_3"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/HOST45689.2020.9300274"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/sp54263.2024.00250"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TCSI.2024.3470135"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3061314"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS51556.2021.9401626"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD57390.2023.10323806"},{"key":"ref18","author":"Horvath","journal-title":"BarraCUDA: Edge GPUs do Leak DNN Weights"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/EMCEurope57790.2023.10274170"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3600160.3600189"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/MDAT.2021.3128436"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19214-2_8"},{"issue":"15","key":"ref23","article-title":"Physical side-channel attacks on embedded neural networks: A survey","volume-title":"Applied Sciences","volume":"11","author":"M\u00e9ndez Real","year":"2021"},{"key":"ref24","first-page":"1","article-title":"BoMaNet: Boolean masking of an entire neural network","volume-title":"Proceedings of the 39th International Conference on Computer-Aided Design. Virtual Event","author":"Dubey"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/HOST45689.2020.9300276"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2022.i1.506-556"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ISSCC42614.2022.9731598"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2022-0025"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TVLSI.2023.3340553"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.23919\/DATE54114.2022.9774710"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TCSII.2022.3213728"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/tvlsi.2024.3387986"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-22829-2_13"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-95085-9_8"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/HOST64725.2025.11050072"},{"key":"ref36","author":"Han","year":"2016","journal-title":"Deep compression: Compressing deep neural networks with pruning, trained quantization and huffman coding"},{"key":"ref37","first-page":"1135","article-title":"Learning both weights and connections for efficient neural networks","volume-title":"Proceedings of the 29th International Conference on Neural Information Processing Systems","volume":"1","author":"Han"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2024.3447085"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3527156"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2893356"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3716845"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2025.i1.78-103"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-68697-5_9"},{"key":"ref44","volume-title":"ARM, Cortex-M4 Technical Reference Manual - ARM DDI 0439B Errata 01","year":"2010"},{"key":"ref45","volume-title":"Tinyengine official github repository","year":"2020"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3565571"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3124761"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2022.i1.175-220"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3298436"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/iolts.2019.8854377"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3445814.3446747"},{"key":"ref52","first-page":"315","article-title":"VPP: Privacy preserving machine learning via undervolting","volume-title":"2023 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","author":"Islam"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37288-9_9"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31912-9_4"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/IIH-MSP.2012.119"},{"key":"ref56","first-page":"29","article-title":"Filtering-based CPA: a successful side-channel attack against desynchronization countermeasures","volume-title":"Fourth Workshop on Cryptography and Security in Computing Systems (CS2 \u201917)","author":"Moussa"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ICDIPC.2012.6257262"}],"event":{"name":"2026 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","location":"Washington, DC, USA","start":{"date-parts":[[2026,5,4]]},"end":{"date-parts":[[2026,5,7]]}},"container-title":["2026 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11604575\/11604182\/11604810.pdf?arnumber=11604810","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T05:35:56Z","timestamp":1784180156000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11604810\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,4]]},"references-count":57,"URL":"https:\/\/doi.org\/10.1109\/host68814.2026.11604810","relation":{},"subject":[],"published":{"date-parts":[[2026,5,4]]}}}