{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,2]],"date-time":"2026-08-02T23:47:36Z","timestamp":1785714456894,"version":"3.56.0"},"reference-count":48,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"7","license":[{"start":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T00:00:00Z","timestamp":1625097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T00:00:00Z","timestamp":1625097600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T00:00:00Z","timestamp":1625097600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"publisher","award":["2018YFA0701500"],"award-info":[{"award-number":["2018YFA0701500"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002367","name":"Key Research Program of Frontier Sciences, CAS","doi-asserted-by":"publisher","award":["ZDBSLY-JSC012"],"award-info":[{"award-number":["ZDBSLY-JSC012"]}],"id":[{"id":"10.13039\/501100002367","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002367","name":"Strategic Priority Research Program of CAS","doi-asserted-by":"publisher","award":["XDB44000000"],"award-info":[{"award-number":["XDB44000000"]}],"id":[{"id":"10.13039\/501100002367","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61804155"],"award-info":[{"award-number":["61804155"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61532017"],"award-info":[{"award-number":["61532017"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002367","name":"Youth Innovation Promotion Association CAS","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100002367","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Young Elite Scientists Sponsorship Program by CAST","award":["2018QNRC001"],"award-info":[{"award-number":["2018QNRC001"]}]},{"name":"Beijing Academy of Artificial Intelligence"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst."],"published-print":{"date-parts":[[2021,7]]},"DOI":"10.1109\/tcad.2020.3018403","type":"journal-article","created":{"date-parts":[[2020,8,20]],"date-time":"2020-08-20T20:08:15Z","timestamp":1597954095000},"page":"1327-1339","source":"Crossref","is-referenced-by-count":70,"title":["Chaotic Weights: A Novel Approach to Protect Intellectual Property of Deep Neural Networks"],"prefix":"10.1109","volume":"40","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6198-7043","authenticated-orcid":false,"given":"Ning","family":"Lin","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7337-1844","authenticated-orcid":false,"given":"Xiaoming","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6233-3538","authenticated-orcid":false,"given":"Hang","family":"Lu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0874-814X","authenticated-orcid":false,"given":"Xiaowei","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/L-CA.2010.2"},{"key":"ref38","author":"b\u00f6hm","year":"2012","journal-title":"Physical Unclonable Functions in Theory and Practice"},{"key":"ref33","author":"hanouti","year":"2019","journal-title":"Breaking an image encryption scheme based on Arnold map and Lucas series"},{"key":"ref32","first-page":"1","article-title":"Arnold’s cat map","volume":"45","author":"peterson","year":"1997","journal-title":"Math 45 - Linear Algebra"},{"key":"ref31","author":"arnol\u2019d","year":"1968","journal-title":"Ergodic Problems of Classical Mechanics"},{"key":"ref30","author":"jia","year":"2015","journal-title":"Caffe Model Zoo"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1002\/j.1538-7305.1949.tb00928.x"},{"key":"ref36","year":"2020","journal-title":"General Data Protection Regulation"},{"key":"ref35","year":"2019","journal-title":"June 2019 TOP500 Supercomputer Sites"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1016\/j.physleta.2009.02.030"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-019-04434-z"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2018.00046"},{"key":"ref11","author":"chen","year":"2018","journal-title":"Detecting backdoor attacks on deep neural networks by activation clustering"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3359789.3359790"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329808"},{"key":"ref14","first-page":"1","article-title":"Reverse engineering convolutional neural networks through side-channel information leaks","author":"hua","year":"2018","journal-title":"Proc 55th ACM\/ESDA\/IEEE Design Autom Conf (DAC)"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378460"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2020.2995347"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2019.8715027"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD45719.2019.8942041"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s13735-018-0147-1"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3078971.3078974"},{"key":"ref6","first-page":"1615","article-title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","author":"adi","year":"2018","journal-title":"Proc 27th USENIX Security Symp (USENIX Security)"},{"key":"ref29","year":"0","journal-title":"TorchVison Pretrained Models"},{"key":"ref5","article-title":"Learning multiple layers of features from tiny images","author":"krizhevsky","year":"2009"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240862"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196550"},{"key":"ref2","year":"2020","journal-title":"Single Cloud TPU Device Pricing"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304051"},{"key":"ref1","author":"devlin","year":"2018","journal-title":"BERT Pre-training of deep bidirectional transformers for language understanding"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-88682-2_5"},{"key":"ref20","author":"goodfellow","year":"2014","journal-title":"Explaining and Harnessing Adversarial Examples"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/VCIP.2017.8305148"},{"key":"ref48","year":"2020","journal-title":"NLP From Scratch Generating Names With a Character-Level RNN"},{"key":"ref22","first-page":"1501","article-title":"XONN: XNOR-based oblivious deep neural network inference","author":"riazi","year":"2019","journal-title":"Proc 28th USENIX Security Symp (USENIX Security)"},{"key":"ref47","year":"2020","journal-title":"Segmentation Models Car Segmentation Experiments"},{"key":"ref21","first-page":"1651","article-title":"GAZELLE: A low latency framework for secure neural network inference","author":"juvekar","year":"2018","journal-title":"Proc 27th USENIX Security Symp (USENIX Security)"},{"key":"ref42","author":"simonyan","year":"2014","journal-title":"Very Deep Convolutional Networks for Large-scale Image Recognition"},{"key":"ref24","year":"2020","journal-title":"AI and machine learning products"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/IHMSC.2017.175"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134056"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"ref26","first-page":"265","article-title":"TensorFlow: A system for large-scale machine learning","author":"abadi","year":"2016","journal-title":"Proc of USENIX Symp on Operating Systems Design and Implementation (OSDI)"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"ref25","first-page":"8024","article-title":"PyTorch: An imperative style, high-performance deep learning library","author":"paszke","year":"2019","journal-title":"Advances Neural Information Processing Systems"}],"container-title":["IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/43\/9459543\/09171904.pdf?arnumber=9171904","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:49:34Z","timestamp":1652194174000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9171904\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,7]]},"references-count":48,"journal-issue":{"issue":"7"},"URL":"https:\/\/doi.org\/10.1109\/tcad.2020.3018403","relation":{},"ISSN":["0278-0070","1937-4151"],"issn-type":[{"value":"0278-0070","type":"print"},{"value":"1937-4151","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,7]]}}}