{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T03:39:47Z","timestamp":1784777987918,"version":"3.55.0"},"reference-count":300,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62074131"],"award-info":[{"award-number":["62074131"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001381","name":"National Research Foundation, Singapore, through its National Cybersecurity Research and Development Programme\/Cyber-Hardware Forensic and Assurance Evaluation Research and Development Programme NCR","doi-asserted-by":"publisher","award":["CHFA-GC1-AW01"],"award-info":[{"award-number":["CHFA-GC1-AW01"]}],"id":[{"id":"10.13039\/501100001381","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput.-Aided Des. Integr. Circuits Syst."],"published-print":{"date-parts":[[2021,6]]},"DOI":"10.1109\/tcad.2020.3047976","type":"journal-article","created":{"date-parts":[[2020,12,29]],"date-time":"2020-12-29T20:41:42Z","timestamp":1609274502000},"page":"1010-1038","source":"Crossref","is-referenced-by-count":188,"title":["An Overview of Hardware Security and Trust: Threats, Countermeasures, and Design Tools"],"prefix":"10.1109","volume":"40","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6738-4297","authenticated-orcid":false,"given":"Wei","family":"Hu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8897-6176","authenticated-orcid":false,"given":"Chip-Hong","family":"Chang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8215-7903","authenticated-orcid":false,"given":"Anirban","family":"Sengupta","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6082-6961","authenticated-orcid":false,"given":"Swarup","family":"Bhunia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9062-5570","authenticated-orcid":false,"given":"Ryan","family":"Kastner","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3228-6544","authenticated-orcid":false,"given":"Hai","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref275","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2011.2120970"},{"key":"ref274","doi-asserted-by":"publisher","DOI":"10.1145\/1508244.1508258"},{"key":"ref277","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2012.2189105"},{"key":"ref276","doi-asserted-by":"publisher","DOI":"10.1145\/2676548"},{"key":"ref271","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS45731.2020.9180476"},{"key":"ref270","doi-asserted-by":"publisher","DOI":"10.1109\/AsianHOST47458.2019.9006702"},{"key":"ref273","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378532"},{"key":"ref170","doi-asserted-by":"publisher","DOI":"10.1109\/DATE.2004.1268856"},{"key":"ref272","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240791"},{"key":"ref172","doi-asserted-by":"publisher","DOI":"10.1109\/ISSCC.2009.4977309"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.1145\/2463209.2488830"},{"key":"ref174","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2018.2822691"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.1109\/ISLPED.2015.7273503"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD.2016.7753358"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-68914-0_27"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD45719.2019.8942173"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40349-1_17"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1145\/2487726.2487728"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1109\/ISVLSI.2017.22"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2366231.2337172"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354201"},{"key":"ref33","author":"bernstein","year":"2005","journal-title":"Cache-timing attacks on AES"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2017.8203770"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00057"},{"key":"ref30","article-title":"Survey of approaches for security verification of hardware\/software systems","author":"demir","year":"2016"},{"key":"ref267","article-title":"On detecting adversarial perturbations","author":"metzen","year":"2017","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3291047"},{"key":"ref268","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2019.00126"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/IGSC48788.2019.8957192"},{"key":"ref269","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2019.2915318"},{"key":"ref34","first-page":"707","article-title":"Why you should care about don’t cares: Exploiting internal don’t care conditions for hardware Trojans","author":"hu","year":"2017","journal-title":"Proc Int Conf Comput -Aided Design (ICCAD)"},{"key":"ref288","doi-asserted-by":"publisher","DOI":"10.1109\/IVSW.2016.7566608"},{"key":"ref287","year":"2016","journal-title":"JasperGold Security Path Verification App"},{"key":"ref286","year":"2016","journal-title":"Questa Secure Check—Exhaustive Verification of Secure Paths to Critical Hardware Storage"},{"key":"ref285","doi-asserted-by":"publisher","DOI":"10.1145\/3337167.3337174"},{"key":"ref284","doi-asserted-by":"publisher","DOI":"10.1145\/3061639.3062316"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2014.39"},{"key":"ref283","doi-asserted-by":"publisher","DOI":"10.1109\/SP.1982.10014"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.3233\/JHS-160550"},{"key":"ref282","doi-asserted-by":"publisher","DOI":"10.1145\/2694344.2694372"},{"key":"ref281","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2019.8714906"},{"key":"ref280","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2017.8203772"},{"key":"ref185","first-page":"443","article-title":"A unified framework for the analysis of side-channel key recovery attacks","author":"standaert","year":"2009","journal-title":"Proc Annual Int Conf Theory Appl Cryptograph Techn"},{"key":"ref184","first-page":"13","article-title":"Template attacks","author":"chari","year":"2002","journal-title":"Proc Workshop Cryptographic Hardware Embedded Syst"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.4218\/etrij.08.0107.0167"},{"key":"ref182","article-title":"Secure application programming in the presence of side channel attacks","author":"witteman","year":"2008","journal-title":"Proc RSA Conf"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1007\/11889700_15"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45238-6_10"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1109\/FDTC.2007.8"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2008.149"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/MCAS.2017.2713305"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2906147"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1109\/DATE.2003.1253591"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2019.2944586"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/MTV.2016.12"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.23919\/DATE48585.2020.9116483"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.micpro.2019.03.003"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2019.03.002"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/s41635-017-0025-y"},{"key":"ref278","doi-asserted-by":"publisher","DOI":"10.1145\/2000064.2000087"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2014.2334493"},{"key":"ref279","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2017.7927266"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2755563"},{"key":"ref293","year":"2019","journal-title":"VC Functional Safety Manager"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/2678373.2665726"},{"key":"ref292","year":"2019","journal-title":"CustomSim Reliability Analysis"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2005.01.010"},{"key":"ref295","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240839"},{"key":"ref294","doi-asserted-by":"publisher","DOI":"10.1145\/2966986.2980086"},{"key":"ref297","doi-asserted-by":"publisher","DOI":"10.1109\/IVSW.2018.8494881"},{"key":"ref296","doi-asserted-by":"publisher","DOI":"10.1109\/ASP-DAC47756.2020.9045426"},{"key":"ref299","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240784"},{"key":"ref298","doi-asserted-by":"publisher","DOI":"10.1145\/3359986.3361207"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2003.1183547"},{"key":"ref153","author":"kaplan","year":"2016","journal-title":"AMD Memory Encryption"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920292"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1145\/28395.28416"},{"key":"ref150","year":"2015","journal-title":"Improving Real-Time Performance by Utilizing Cache Allocation Technology"},{"key":"ref291","first-page":"213","article-title":"HardFails: Insights into software-exploitable hardware bugs","author":"dessouky","year":"2019","journal-title":"Proc USENIX Conf Security Symp"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354246"},{"key":"ref290","year":"2019","journal-title":"Radix-M Hardware Security Platform for Firmware Security Validation"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2016.7446082"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1109\/TCC.2014.2358236"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2018.00083"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2018.00042"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1145\/2086696.2086714"},{"key":"ref289","year":"2019","journal-title":"Radix-S Hardware Root of Trust Security Verification Framework"},{"key":"ref59","first-page":"79","article-title":"Clustering algorithms for non-profiled single-execution attacks on exponentiations","author":"heyszl","year":"2013","journal-title":"Proc Int Conf Smart Card Res Adv Appl"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2017.7966373"},{"key":"ref57","first-page":"16","article-title":"Correlation power analysis with a leakage model","author":"brier","year":"2004","journal-title":"Cryptographic Hardware and Embedded Systems (CHES)"},{"key":"ref56","doi-asserted-by":"crossref","first-page":"388","DOI":"10.1007\/3-540-48405-1_25","article-title":"Differential power analysis","author":"kocher","year":"1999","journal-title":"Advances in Cryptology (CRYPTO)"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2015.7056069"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2006.20"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/2133375.2133377"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.22"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2017.2768420"},{"key":"ref167","first-page":"13","article-title":"Test vector leakage assessment (TVLA) methodology in practice","author":"becker","year":"2013","journal-title":"Proc Int Cryptograph Module Conf"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-45608-8_18"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44709-1_26"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.19"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04138-9_1"},{"key":"ref162","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660294"},{"key":"ref161","author":"de clercq","year":"2017","journal-title":"A survey of Hardware-based Control Flow Integrity (CFI)"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1145\/3054924"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s41635-018-0046-1"},{"key":"ref3","author":"lipp","year":"2018","journal-title":"Meltdown"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2018.8342177"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10175-0_13"},{"key":"ref8","first-page":"1","article-title":"Hardware Trojans hidden in RTL don’t cares—Automated insertion and prevention methodologies","author":"fern","year":"2015","journal-title":"Proc IEEE Int Test Conf (ITC)"},{"key":"ref159","author":"prakash","year":"2016","journal-title":"Anti-tamper memory"},{"key":"ref7","first-page":"1057","article-title":"CLKSCREW: Exposing the perils of security-oblivious energy management","author":"tang","year":"2017","journal-title":"Proc 26th USENIX Security Symp (USENIX Security)"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/1506409.1506429"},{"key":"ref157","first-page":"1","year":"2008","journal-title":"Anti-tamper Capabilities in Fpga Designs"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.10"},{"key":"ref158","year":"2019","journal-title":"Anti-tamper active shield TND6321\/D rev 0"},{"key":"ref46","first-page":"337","article-title":"Verifying Information Flow Properties of Firmware Using Symbolic Execution","author":"pramod subramanyan","year":"2016","journal-title":"Design Automation Test in Europe Conference Exhibition (DATE)"},{"key":"ref45","first-page":"95","article-title":"A large-scale analysis of the security of embedded firmwares","author":"costin","year":"2014","journal-title":"Proc 23rd USENIX Security Symp (USENIX Security)"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2015.7372616"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2014.2331332"},{"key":"ref42","article-title":"Summary of attacks against BIOS and secure boot","author":"bulygin","year":"2014","journal-title":"Proc DEFCON Conf"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD45719.2019.8942098"},{"key":"ref44","first-page":"46","article-title":"Secure boot and remote attestation in the sanctum processor","author":"lebedev","year":"2018","journal-title":"Proc IEEE 31st Comput Security Found Symp (CSF)"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1997.601317"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660289"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-010-0115-0"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2018.2818720"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2015.2511144"},{"key":"ref76","first-page":"1","article-title":"AVFSM: A framework for identifying and mitigating vulnerabilities in FSMs","author":"nahiyan","year":"2016","journal-title":"Proc 53rd Design Autom Conf (DAC)"},{"key":"ref77","first-page":"8","article-title":"X-attack: Remote activation of satisfiability don’t-care hardware trojans on shared FPGAs","author":"mahmoud","year":"2020","journal-title":"Proc Int Conf Field Program Logic Appl (FPL)"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2010.299"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1007\/s41635-017-0001-6"},{"key":"ref78","first-page":"101","author":"antonopoulos","year":"2018","journal-title":"Hardware Trojans in Analog Mixed-Signal and RF ICs"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40349-1_12"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3373087.3375882"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ISEMC.2010.5711254"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1016\/j.vlsi.2005.12.013"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-29485-8_13"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44709-1_21"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-21476-4_13"},{"key":"ref66","first-page":"23","author":"skorobogatov","year":"2012","journal-title":"Breakthrough silicon scanning discovers backdoor in military chip"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/IOLTS.2019.8854430"},{"key":"ref300","first-page":"1523","article-title":"Quantifying Hardware Security Using Joint Information Flow Analysis","author":"ryan kastner","year":"2016","journal-title":"Design Automation Test in Europe Conference Exhibition (DATE)"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1109\/MDAT.2019.2899064"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/2228360.2228386"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.1109\/SIOT.2015.15"},{"key":"ref198","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2019.2897629"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2018.i2.242-276"},{"key":"ref193","first-page":"328","article-title":"Design and characterisation of an AES chip embedding countermeasures","volume":"1","author":"agoyan","year":"2011","journal-title":"Int J Intell Eng Informat"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1049\/iet-ifs:20060163"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1109\/FDTC.2013.12"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33481-8_17"},{"key":"ref95","first-page":"497","article-title":"Terminal brain damage: Exposing the graceless degradation in deep neural networks under hardware fault attacks","author":"hong","year":"2019","journal-title":"Proc USENIX Conf Security Symp"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/FDTC.2019.00015"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-014-0092-8"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-12510-2_13"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2002.804378"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3278519"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2646638"},{"key":"ref91","first-page":"3896","article-title":"Adversarial camera stickers: A physical camera-based attack on deep learning systems","author":"li","year":"2019","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref90","author":"kurakin","year":"2016","journal-title":"Adversarial examples in the physical world"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2019.8715027"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/3316781.3317825"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS.2019.8702493"},{"key":"ref82","first-page":"26","article-title":"Origin of NBTI variability in deeply scaled pFETs","author":"kaczer","year":"2010","journal-title":"Proc IEEE Int Rel Phys Symp"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/ETS48528.2020.9131560"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1049\/iet-cdt.2018.5081"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/TED.2013.2238237"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/FDTC.2014.12"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/2966986.2967054"},{"key":"ref86","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2013","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref87","author":"goodfellow","year":"2014","journal-title":"Explaining and Harnessing Adversarial Examples"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.17"},{"key":"ref200","first-page":"310","article-title":"Solomon: An automated framework for detecting fault attack vulnerabilities in hardware","author":"srivatsava","year":"2020","journal-title":"Proc Design Autom Test Eur Conf Exhibition (DATE)"},{"key":"ref101","first-page":"601","article-title":"Stealing machine learning models via prediction APIs","author":"tram\u00e8r","year":"2016","journal-title":"Proc Usenix Security Symp"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18072.2020.9218577"},{"key":"ref209","doi-asserted-by":"publisher","DOI":"10.1109\/MDT.2010.24"},{"key":"ref203","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2006.882490"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2008.927732"},{"key":"ref201","first-page":"272","article-title":"FEDS: Comprehensive fault attack exploitability detection for software implementations of block ciphers","volume":"2020","author":"keerthi","year":"2020","journal-title":"IACR Transactions on Cryptographic Hardware and Embedded Systems"},{"key":"ref202","doi-asserted-by":"publisher","DOI":"10.1145\/1080334.1080338"},{"key":"ref207","doi-asserted-by":"publisher","DOI":"10.1145\/1403375.1403631"},{"key":"ref208","doi-asserted-by":"publisher","DOI":"10.1109\/DATE.2012.6176634"},{"key":"ref205","doi-asserted-by":"publisher","DOI":"10.1109\/LOCS.2019.2942289"},{"key":"ref206","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2963711"},{"key":"ref211","doi-asserted-by":"publisher","DOI":"10.1109\/TETC.2017.2740364"},{"key":"ref210","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2015.7140252"},{"key":"ref212","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66787-4_10"},{"key":"ref213","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133985"},{"key":"ref214","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2904838"},{"key":"ref215","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.2968183"},{"key":"ref216","doi-asserted-by":"publisher","DOI":"10.1145\/3316781.3317831"},{"key":"ref217","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2009.2028166"},{"key":"ref218","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516654"},{"key":"ref219","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2015.2422836"},{"key":"ref220","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2017.2654352"},{"key":"ref222","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS.2014.6865092"},{"key":"ref221","doi-asserted-by":"publisher","DOI":"10.7873\/DATE.2015.0352"},{"key":"ref229","doi-asserted-by":"publisher","DOI":"10.1145\/2744769.2744822"},{"key":"ref228","doi-asserted-by":"publisher","DOI":"10.1109\/MDAT.2013.2249555"},{"key":"ref227","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2007.36"},{"key":"ref226","doi-asserted-by":"publisher","DOI":"10.1145\/1366110.1366196"},{"key":"ref225","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978396"},{"key":"ref224","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2016.225"},{"key":"ref223","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2016.7495569"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1007\/s41635-017-0003-4"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1145\/2808414.2808418"},{"key":"ref125","article-title":"Applying circuit delay-based physically unclonable functions (PUFs) for masking operation of memory-based PUFs to resist invasive and clone attacks","author":"guo","year":"2017"},{"key":"ref124","year":"2016","journal-title":"NXP Delivers Enhanced Security Solution to Protect Personal Data for Payment and eGovernment Services"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/TIE.2019.2893831"},{"key":"ref128","author":"karimian","year":"2018","journal-title":"Secure and reliable biometric access control for resource-constrained systems and IoT"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/TCSI.2018.2855061"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2485163"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2016.05.012"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1109\/TCSVT.2016.2633878"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1145\/3183518"},{"key":"ref232","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2833059"},{"key":"ref233","first-page":"1","article-title":"Hardware Trojan detection through golden chip-free statistical side-channel fingerprinting","author":"liu","year":"2014","journal-title":"Proc 51st ACM\/EDAC\/IEEE Design Autom Conf (DAC)"},{"key":"ref230","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2013.6691167"},{"key":"ref231","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2012.200"},{"key":"ref239","doi-asserted-by":"publisher","DOI":"10.1109\/MDT.2012.2196252"},{"key":"ref238","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2014.2356453"},{"key":"ref235","doi-asserted-by":"publisher","DOI":"10.1109\/TVLSI.2010.2093547"},{"key":"ref234","doi-asserted-by":"publisher","DOI":"10.1007\/s10836-016-5632-y"},{"key":"ref237","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2014.2360432"},{"key":"ref236","doi-asserted-by":"publisher","DOI":"10.1109\/VTS.2011.5783766"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2620280"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2697402"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2926777"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1109\/AsianHOST.2016.7835573"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1109\/TCSI.2015.2476318"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2020.2977597"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1145\/2948618.2954331"},{"key":"ref142","author":"alves","year":"2014","journal-title":"TrustZone Integrated Hardware and Software Security Enabling Trusted Computing in Embedded Systems"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1145\/1273440.1250723"},{"key":"ref2","author":"kocher","year":"2018","journal-title":"Spectre Attacks Exploiting Speculative Execution"},{"key":"ref144","article-title":"Partitioned cache architecture as a side-channel defence mechanism","author":"page","year":"2005"},{"key":"ref1","year":"2016","journal-title":"Bits Please Extracting Qualcomm’s Keymaster Keys—Breaking Android Full Disk Encryption"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1145\/1655008.1655019"},{"key":"ref241","doi-asserted-by":"publisher","DOI":"10.1109\/DAC18072.2020.9218514"},{"key":"ref242","doi-asserted-by":"publisher","DOI":"10.1145\/2744769.2744823"},{"key":"ref243","doi-asserted-by":"publisher","DOI":"10.1109\/TETC.2016.2585046"},{"key":"ref244","doi-asserted-by":"publisher","DOI":"10.1109\/VTS.2012.6231062"},{"key":"ref240","first-page":"1","article-title":"Real-time trust evaluation in integrated circuits","author":"jin","year":"2014","journal-title":"Proc Design Autom Test Eur Conf Exhibition (DATE)"},{"key":"ref248","doi-asserted-by":"publisher","DOI":"10.1109\/VTS.2016.7477271"},{"key":"ref247","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2707327"},{"key":"ref246","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2707323"},{"key":"ref245","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2015.7140256"},{"key":"ref249","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2017.2748021"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/CICC.2014.6946136"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2016.2625341"},{"key":"ref107","first-page":"414","article-title":"1200?m² physical random-number generators based on SiN MOSFET for secure smart-card application","author":"matsumoto","year":"2008","journal-title":"IEEE Int Solid-State Circuits Conf Dig Tech Papers"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2016.2558490"},{"key":"ref105","first-page":"1","article-title":"Reverse engineering convolutional neural networks through side-channel information leaks","author":"hua","year":"2018","journal-title":"Proc 55th Annu Design Autom Conf (DAC)"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1145\/3316781.3322465"},{"key":"ref103","first-page":"2003","article-title":"Cache telepathy: Leveraging shared resource attacks to learn DNN architectures","author":"yan","year":"2020","journal-title":"Proc Usenix Security Symp"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1145\/2966986.2967074"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/AsianHOST.2017.8353992"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2007.910965"},{"key":"ref110","doi-asserted-by":"crossref","first-page":"1022","DOI":"10.1109\/JSSC.2016.2519383","article-title":"An all-digital edge racing true random number generator robust against PVT variations","volume":"51","author":"yang","year":"2016","journal-title":"IEEE J Solid-State Circuits"},{"key":"ref250","doi-asserted-by":"publisher","DOI":"10.1145\/3126552"},{"key":"ref251","doi-asserted-by":"publisher","DOI":"10.1109\/ASAP.2017.7995258"},{"key":"ref254","doi-asserted-by":"publisher","DOI":"10.1145\/2808414.2808420"},{"key":"ref255","doi-asserted-by":"publisher","DOI":"10.1109\/TVLSI.2014.2323976"},{"key":"ref252","doi-asserted-by":"publisher","DOI":"10.1109\/IOLTS.2014.6873671"},{"key":"ref253","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2013.193"},{"key":"ref257","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2018.2852265"},{"key":"ref256","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2017.015072"},{"key":"ref259","doi-asserted-by":"publisher","DOI":"10.1109\/DFT.2012.6378191"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TVLSI.2016.2633348"},{"key":"ref258","doi-asserted-by":"publisher","DOI":"10.1109\/ISVLSI.2018.00138"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00049"},{"key":"ref12","first-page":"991","article-title":"Foreshadow: Extracting the keys to the Intel SGX kingdom with transient out-of-order execution","author":"bulck","year":"2018","journal-title":"Proc 27th USENIX Security Symp"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/AsianHOST47458.2019.9006725"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ISQED.2016.7479228"},{"key":"ref15","article-title":"Performance counters to rescue: A machine learning based safeguard against micro-architectural side-channel-attacks","author":"alam","year":"2017"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2017.2729341"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.45"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TCE.2019.2944882"},{"key":"ref117","year":"2020","journal-title":"League of Entropy"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2018.2801220"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS.2017.8050606"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1016\/j.matt.2020.01.024"},{"key":"ref114","author":"durden","year":"2013","journal-title":"The Approximate Present Does Not Approximately Determine the Future"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2018.2886350"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2017.2694833"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/TCSI.2010.2052515"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32946-3_27"},{"key":"ref121","article-title":"Security analysis of PUF-based key generation and entity authentication","author":"delvaux","year":"2017"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2774500"},{"key":"ref123","author":"peterson","year":"2018","journal-title":"Developing Tamper-Resistant Designs with Zynq UltraScale+ Devices"},{"key":"ref260","doi-asserted-by":"publisher","DOI":"10.1109\/JSSC.2019.2953855"},{"key":"ref261","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref262","doi-asserted-by":"publisher","DOI":"10.1109\/CISS.2018.8362326"},{"key":"ref263","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"ref264","article-title":"Defensive quantization: When efficiency meets robustness","author":"lin","year":"2019","journal-title":"Proc Int Conf Learn Represent (ICLR)"},{"key":"ref265","author":"feinman","year":"2017","journal-title":"Detecting adversarial samples from artifacts"},{"key":"ref266","first-page":"132","article-title":"SPN dash—Fast detection of adversarial attacks on mobile via sensor pattern noise fingerprinting","author":"nixon","year":"2018","journal-title":"Proc Int Conf Comput -Aided Design (ICCAD)"}],"container-title":["IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/43\/9437244\/09310331.pdf?arnumber=9310331","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:49:30Z","timestamp":1652194170000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9310331\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,6]]},"references-count":300,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/tcad.2020.3047976","relation":{},"ISSN":["0278-0070","1937-4151"],"issn-type":[{"value":"0278-0070","type":"print"},{"value":"1937-4151","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,6]]}}}