{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,30]],"date-time":"2025-10-30T07:18:02Z","timestamp":1761808682898,"version":"3.37.3"},"reference-count":62,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Prime Minster's Research Fellowship"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE J. Emerg. Sel. Topics Circuits Syst."],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/jetcas.2024.3485133","type":"journal-article","created":{"date-parts":[[2024,10,23]],"date-time":"2024-10-23T17:49:01Z","timestamp":1729705741000},"page":"1-1","source":"Crossref","is-referenced-by-count":1,"title":["Stealing the Invisible: Unveiling Pre-Trained CNN Models through Adversarial Examples and Timing Side-Channels"],"prefix":"10.1109","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0452-885X","authenticated-orcid":false,"given":"Shubhi","family":"Shukla","sequence":"first","affiliation":[{"name":"Centre for Computational Data Sciences, Indian Institute of Technology Kharagpur, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3338-2944","authenticated-orcid":false,"given":"Manaar","family":"Alam","sequence":"additional","affiliation":[{"name":"New York University Abu Dhabi, United Arab Emirates"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1908-9813","authenticated-orcid":false,"given":"Pabitra","family":"Mitra","sequence":"additional","affiliation":[{"name":"Computer Science and Engineering Department, Indian Institute of Technology Kharagpur, India"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6499-8346","authenticated-orcid":false,"given":"Debdeep","family":"Mukhopadhyay","sequence":"additional","affiliation":[{"name":"Computer Science and Engineering Department, Indian Institute of Technology Kharagpur, India"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"volume-title":"PyTorch vs Tensorflow in 2023: A Head-to-Head Comparison","year":"2023","key":"ref1"},{"key":"ref2","first-page":"515","article-title":"CSI NN: Reverse engineering of neural network architectures through electromagnetic side channel","volume-title":"Proc. USENIX Secur. Symp.","author":"Batina"},{"key":"ref3","first-page":"3593","article-title":"Teacher model fingerprinting attacks against transfer learning","volume-title":"Proc. 31st USENIX Secur. Symp.","author":"Chen"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-81645-2_7"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2018.8489592"},{"key":"ref6","article-title":"Adversarial model extraction on graph neural networks","author":"DeFazio","year":"2019","journal-title":"arXiv:1912.07721"},{"key":"ref7","article-title":"Stealing neural networks via timing side channels","author":"Duddu","year":"2018","journal-title":"arXiv:1812.11720"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref9","first-page":"2669","article-title":"Stealing links from graph neural networks","volume-title":"Proc. USENIX Secur. Symp.","author":"He"},{"key":"ref10","article-title":"Security analysis of deep neural networks operating in the presence of cache side-channel attacks","author":"Hong","year":"2018","journal-title":"arXiv:1810.03487"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-61486-6_10"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378460"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/DAC.2018.8465773"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1602.07360"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01360"},{"key":"ref17","first-page":"4","article-title":"Thieves on sesame street! model extraction of BERT-based Apis","volume-title":"Proc. 8th Int. Conf. Learn. Represent.","author":"Krishna"},{"volume-title":"Learning Multiple Layers of Features From Tiny Images","year":"2009","author":"Krizhevsky","key":"ref18"},{"key":"ref19","first-page":"1106","article-title":"ImageNet classification with deep convolutional neural networks","volume-title":"Proc. 26th Annu. Conf. Neural Inf. Process. Syst.","author":"Krizhevsky"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2023.3270135"},{"key":"ref21","first-page":"1200","article-title":"Query-efficient black-box attack by active learning","volume-title":"Proc. IEEE Int. Conf. Data Min. (ICDM)","author":"Li"},{"key":"ref22","article-title":"On extracting specialized code abilities from large language models: A feasibility study","author":"Li","year":"2023","journal-title":"arXiv:2303.03012"},{"key":"ref23","first-page":"1","article-title":"Delving into transferable adversarial examples and black-box attacks","volume-title":"Proc. 5th Int. Conf. Learn. Represent.","author":"Liu"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3411495.3421356"},{"key":"ref25","article-title":"Swin transformer v2: Scaling up capacity and resolution","author":"Liu","year":"2021","journal-title":"arXiv:2111.09883"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01264-9_8"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2019.8851798"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243831"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3595292"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00509"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i01.5432"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref33","first-page":"8024","article-title":"PyTorch: An imperative style, high-performance deep learning library","volume-title":"Proc. NIPS","author":"Paszke"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00029"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833743"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1049\/cit2.12029"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2015.152"},{"key":"ref38","article-title":"Model weight theft with just noise inputs: The curious case of the petulant attacker","author":"Roberts","year":"2019","journal-title":"arXiv:1912.08987"},{"key":"ref39","first-page":"8178","article-title":"Reverse-engineering deep ReLU networks","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Rolnick"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/cvpr.2018.00474"},{"volume-title":"Accuracy and Loss: Things To Know About the Top-1 and Top-5 Accuracy","year":"2023","key":"ref41"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833607"},{"key":"ref43","first-page":"1","article-title":"Very deep convolutional networks for large-scale image recognition","volume-title":"Proc. 3rd Int. Conf. Learn. Represent.","author":"Simonyan"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.4324\/9781410605337-29"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.308"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3474085.3475591"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00293"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48063.2020.00031"},{"key":"ref49","article-title":"EZClone: Improving DNN model extraction attack via shape distillation from GPU execution profiles","author":"O\u2019Brien Weiss","year":"2023","journal-title":"arXiv:2304.03388"},{"key":"ref50","article-title":"HuggingFace\u2019s transformers: State-of-the-art natural language processing","author":"Wolf","year":"2019","journal-title":"arXiv:1910.03771"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/ICEIC51217.2021.9369754"},{"key":"ref52","article-title":"Visual transformers: Token-based image representation and processing for computer vision","author":"Wu","year":"2020","journal-title":"arXiv:2006.03677"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3497753"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.634"},{"key":"ref55","article-title":"ActiveGuard: An active DNN IP protection technique via adversarial examples","author":"Xue","year":"2021","journal-title":"arXiv:2103.01527"},{"key":"ref56","first-page":"2003","article-title":"Cache telepathy: Leveraging shared resource attacks to learn DNN architectures","volume-title":"Proc. 29th USENIX Security Symposium","author":"Yan"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS45731.2020.9180580"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/HOST45689.2020.9300274"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2022.3147508"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.5244\/C.30.87"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2019.12.016"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3198267"}],"container-title":["IEEE Journal on Emerging and Selected Topics in Circuits and Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/5503868\/5751207\/10731906.pdf?arnumber=10731906","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,14]],"date-time":"2024-12-14T06:54:30Z","timestamp":1734159270000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10731906\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":62,"URL":"https:\/\/doi.org\/10.1109\/jetcas.2024.3485133","relation":{},"ISSN":["2156-3357","2156-3365"],"issn-type":[{"type":"print","value":"2156-3357"},{"type":"electronic","value":"2156-3365"}],"subject":[],"published":{"date-parts":[[2024]]}}}