{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,26]],"date-time":"2026-02-26T15:23:44Z","timestamp":1772119424691,"version":"3.50.1"},"reference-count":27,"publisher":"IEEE","license":[{"start":{"date-parts":[[2021,11,1]],"date-time":"2021-11-01T00:00:00Z","timestamp":1635724800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,11,1]],"date-time":"2021-11-01T00:00:00Z","timestamp":1635724800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,11,1]],"date-time":"2021-11-01T00:00:00Z","timestamp":1635724800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001381","name":"National Research Foundation, Singapore","doi-asserted-by":"publisher","award":["NRF2018NCR-NCR009-0001"],"award-info":[{"award-number":["NRF2018NCR-NCR009-0001"]}],"id":[{"id":"10.13039\/501100001381","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2021,11,1]]},"DOI":"10.1109\/iccad51958.2021.9643512","type":"proceedings-article","created":{"date-parts":[[2021,12,23]],"date-time":"2021-12-23T23:06:46Z","timestamp":1640300806000},"page":"1-9","source":"Crossref","is-referenced-by-count":10,"title":["DeepFreeze: Cold Boot Attacks and High Fidelity Model Recovery on Commercial EdgeML Device"],"prefix":"10.1109","author":[{"given":"Yoo-Seung","family":"Won","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Soham","family":"Chatterjee","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dirmanto","family":"Jap","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Arindam","family":"Basu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shivam","family":"Bhasin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2016.01.009"},{"key":"ref11","first-page":"373","article-title":"Frost: forensic recovery of scrambled telephones","author":"tilo","year":"2014","journal-title":"Proc of the International Conference on Applied Cryptography and Network Security"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/IPFA49335.2020.9260613"},{"key":"ref13","first-page":"601","article-title":"Stealing machine learning models via prediction apis","author":"tramer","year":"2016","journal-title":"25th USENIX Security Symposium ( USENIX Security 16)"},{"key":"ref14","author":"breier","year":"2020","journal-title":"SNIFF Reverse Engineering of Neural Networks with Fault Attacks"},{"key":"ref15","article-title":"Maskednet: A pathway for secure inference against power side-channel attacks","volume":"abs 1910 13063","author":"dubey","year":"2019","journal-title":"CoRR"},{"key":"ref16","first-page":"4: 1","article-title":"Reverse engineering convolutional neural networks through side-channel information leaks","author":"hua","year":"2018","journal-title":"Proceedings of the 55th Annual Design Automation Conference DAC 2018"},{"key":"ref17","author":"hinton","year":"2015","journal-title":"Distilling the knowledge in a neural network"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-021-01453-z"},{"key":"ref19","article-title":"Neural network model extraction attacks in edge devices by hearing architectural hints","volume":"abs 1903 3916","author":"hu","year":"2019","journal-title":"CoRR"},{"key":"ref4","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2014","journal-title":"International Conference on Learning Representations"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref3","first-page":"515","article-title":"CSI NN: reverse engineering of neural network architectures through electromagnetic side channel","author":"batina","year":"2019","journal-title":"28th USENIX Security Symposium USENIX Security 2019"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18072.2020.9218707"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18072.2020.9218577"},{"key":"ref8","first-page":"1345","article-title":"High accuracy and high fidelity extraction of neural networks","author":"jagielski","year":"2020","journal-title":"29th USENIX Security Symposium USENIX Security 20"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/1506409.1506429"},{"key":"ref2","year":"0","journal-title":"Neural Compute Stick 2"},{"key":"ref9","article-title":"An ice-cold boot to break bitlocker.","author":"segerdahl","year":"2018","journal-title":"BlueHat Security Conference"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2019.2921977"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/HOST45689.2020.9300274"},{"key":"ref22","year":"0","journal-title":"Intel Open VINO Toolkit"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/HOST45689.2020.9300276"},{"key":"ref24","first-page":"497","article-title":"Termi-nal brain damage: Exposing the graceless degradation in deep neural networks under hardware fault attacks","author":"hong","year":"2019","journal-title":"28th USENIX Security Symposium ( USENIX Security 19)"},{"key":"ref23","year":"0","journal-title":"Encrypted Models with Open VINO"},{"key":"ref26","first-page":"17","article-title":"Privacy in pharmacogenetics: An end-to-end case study of personalized warfarin dosing","author":"fredrikson","year":"2014","journal-title":"23rd USENIX Security Symposium ( USENIX Security 14)"},{"key":"ref25","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2015","journal-title":"3rd International Conference on Learning Representations ICLR 2015"}],"event":{"name":"2021 IEEE\/ACM International Conference On Computer Aided Design (ICCAD)","location":"Munich, Germany","start":{"date-parts":[[2021,11,1]]},"end":{"date-parts":[[2021,11,4]]}},"container-title":["2021 IEEE\/ACM International Conference On Computer Aided Design (ICCAD)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9643423\/9643432\/09643512.pdf?arnumber=9643512","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T16:55:14Z","timestamp":1652201714000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9643512\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,11,1]]},"references-count":27,"URL":"https:\/\/doi.org\/10.1109\/iccad51958.2021.9643512","relation":{},"subject":[],"published":{"date-parts":[[2021,11,1]]}}}