{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T06:08:29Z","timestamp":1784182109522,"version":"3.55.0"},"reference-count":40,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T00:00:00Z","timestamp":1777852800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T00:00:00Z","timestamp":1777852800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2245344,CCF-2153748,CNS-2442993"],"award-info":[{"award-number":["2245344,CCF-2153748,CNS-2442993"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000181","name":"Air Force Office of Scientific Research","doi-asserted-by":"publisher","award":["FA9550-22-1-0548"],"award-info":[{"award-number":["FA9550-22-1-0548"]}],"id":[{"id":"10.13039\/100000181","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,4]]},"DOI":"10.1109\/host68814.2026.11604834","type":"proceedings-article","created":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T20:02:14Z","timestamp":1784145734000},"page":"68-78","source":"Crossref","is-referenced-by-count":0,"title":["Fault Injection Attacks and Countermeasures on TinyML Algorithms"],"prefix":"10.1109","author":[{"given":"Anthony","family":"Etim","sequence":"first","affiliation":[{"name":"Yale University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Srilalith","family":"Nampally","sequence":"additional","affiliation":[{"name":"Virginia Tech"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aubtin","family":"Rasouli","sequence":"additional","affiliation":[{"name":"Yale University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dustin","family":"Mazza","sequence":"additional","affiliation":[{"name":"Virginia Tech"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Krishna","family":"Chilakapati","sequence":"additional","affiliation":[{"name":"Virginia Tech"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tinghung","family":"Chiu","sequence":"additional","affiliation":[{"name":"Virginia Tech"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ferhat","family":"Erata","sequence":"additional","affiliation":[{"name":"Yale University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Leyla","family":"Nazhandali","sequence":"additional","affiliation":[{"name":"Virginia Tech"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenjie","family":"Xiong","sequence":"additional","affiliation":[{"name":"Virginia Tech"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jakub","family":"Szefer","sequence":"additional","affiliation":[{"name":"Northwestern University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3294111"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.3390\/electronics11132023"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ISIEA54517.2022.9873679"},{"key":"ref4","first-page":"699","article-title":"{VoltPillager}: Hardware-based fault injection attacks against intel {SGX} enclaves using the {SVID} voltage scaling interface","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Chen"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3623652.3623671"},{"key":"ref6","first-page":"8481","article-title":"{GlitchFHE}: Attacking fully homomorphic encryption using fault injection","volume-title":"34th USENIX Security Symposium (USENIX Security 25)","author":"Mankali"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/AsianHOST68425.2025.11370367"},{"key":"ref8","first-page":"800","article-title":"Tensorflow lite micro: Embedded machine learning for tinyml systems","volume-title":"Proceedings of machine learning and systems","volume":"3","author":"David"},{"key":"ref9","article-title":"Cmsis-nn: Efficient neural network kernels for arm cortex-m cpus","author":"Lai","year":"2018","journal-title":"arXiv preprint"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.23919\/DATE54114.2022.9774588"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/AsianHOST.2018.8607175"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3278519"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2012.2188769"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00223"},{"key":"ref15","first-page":"14631480","article-title":"{DeepHammer}: Depleting the intelligence of deep neural networks through targeted chain of bit flips","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Yao","year":"2020"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD57390.2023.10323806"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3617893"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18072.2020.9218577"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA51294.2020.00183"},{"key":"ref20","first-page":"497","article-title":"Terminal brain damage: Exposing the graceless degradation in deep neural networks under hardware fault attacks","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Hong"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2017.8203770"},{"key":"ref22","article-title":"Exploiting vulnerabilities in deep neural networks: Adversarial and fault-injection attacks","author":"Khalid","year":"2021","journal-title":"arXiv preprint"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/host55342.2024.10545382"},{"key":"ref24","first-page":"4437","article-title":"Lend me your ear: Passive remote physical side channels on {PCs}","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Genkin"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD51958.2021.9643547"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ITC51656.2023.00035"},{"key":"ref27","first-page":"6929","article-title":"That person moves like a car: Misclassification attack detection for autonomous systems using spatiotemporal consistency","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Man"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/100216.100225"},{"key":"ref29","article-title":"Robust functional equations with applications to selftesting\/correcting","author":"Rubinfeld","year":"1994","journal-title":"tech. rep., Cornell University"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3676536.3689920"},{"key":"ref31","author":"Erata","year":"2026","journal-title":"Learning randomized reductions"},{"key":"ref32","article-title":"Fastgrnn: A fast, accurate, stable and tiny kilobyte sized gated recurrent neural network","volume":"31","author":"Kusupati","year":"2018","journal-title":"Advances in neural information processing systems"},{"key":"ref33","volume-title":"Fastgrnn.","author":"Research"},{"key":"ref34","author":"Thommas","year":"2022","journal-title":"Tinyml: Convolutional neural networks (cnn)"},{"key":"ref35","author":"Artley","year":"2024","journal-title":"Mnist keras simple cnn 99.6%"},{"key":"ref36","year":"2024","journal-title":"Post-training quantization"},{"key":"ref37","year":"2024","journal-title":"Cmsis-nn: Efficient neural network kernels for arm cortex-m cpus"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1002\/SERIES1345"},{"key":"ref39","author":"Mishra","year":"2024","journal-title":"Wakeworddetection"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330701"}],"event":{"name":"2026 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)","location":"Washington, DC, USA","start":{"date-parts":[[2026,5,4]]},"end":{"date-parts":[[2026,5,7]]}},"container-title":["2026 IEEE International Symposium on Hardware Oriented Security and Trust (HOST)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11604575\/11604182\/11604834.pdf?arnumber=11604834","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T05:34:50Z","timestamp":1784180090000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11604834\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,4]]},"references-count":40,"URL":"https:\/\/doi.org\/10.1109\/host68814.2026.11604834","relation":{},"subject":[],"published":{"date-parts":[[2026,5,4]]}}}