{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:32:39Z","timestamp":1782970359927,"version":"3.54.5"},"reference-count":51,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"10","license":[{"start":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T00:00:00Z","timestamp":1759276800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T00:00:00Z","timestamp":1759276800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T00:00:00Z","timestamp":1759276800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Circuits Syst. I"],"published-print":{"date-parts":[[2025,10]]},"DOI":"10.1109\/tcsi.2025.3552902","type":"journal-article","created":{"date-parts":[[2025,4,1]],"date-time":"2025-04-01T18:10:59Z","timestamp":1743531059000},"page":"5597-5609","source":"Crossref","is-referenced-by-count":4,"title":["A Lightweight PUF-Based Weights Obfuscation Technique for Secure In-Memory AI Inference"],"prefix":"10.1109","volume":"72","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-7516-978X","authenticated-orcid":false,"given":"Luca","family":"Parrini","sequence":"first","affiliation":[{"name":"Bosch Corporate Research, Robert Bosch GmbH, Renningen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0727-6192","authenticated-orcid":false,"given":"Anirban","family":"Kar","sequence":"additional","affiliation":[{"name":"TUM School of Computation, Information and Technology, Chair of AI Processor Design, Munich Institute of Robotics and Machine Intelligence, Technical University of Munich, Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2164-6316","authenticated-orcid":false,"given":"Benjamin","family":"Hettwer","sequence":"additional","affiliation":[{"name":"Bosch Corporate Research, Robert Bosch GmbH, Renningen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9421-9489","authenticated-orcid":false,"given":"Taha","family":"Soliman","sequence":"additional","affiliation":[{"name":"Bosch Corporate Research, Robert Bosch GmbH, Renningen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3356-8917","authenticated-orcid":false,"given":"Yogesh","family":"Singh Chauhan","sequence":"additional","affiliation":[{"name":"Indian Institute of Technology Kanpur, Kanpur, India"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5649-3102","authenticated-orcid":false,"given":"Hussam","family":"Amrouch","sequence":"additional","affiliation":[{"name":"TUM School of Computation, Information and Technology, Chair of AI Processor Design, Munich Institute of Robotics and Machine Intelligence, Technical University of Munich, Munich, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9010-086X","authenticated-orcid":false,"given":"Norbert","family":"Wehn","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Information Technology, Microelectronic Systems Design Research Group, RPTU Kaiserslautern-Landau, Kaiserslautern, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MM.2024.3373763"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3386263.3407649"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/eurosp.2019.00044"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM51629.2021.00182"},{"key":"ref5","article-title":"Model extraction attacks on graph neural networks: Taxonomy and realization","author":"Wu","year":"2021","journal-title":"arXiv:2010.12751"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref7","article-title":"MIT discarded hard drives yield private info","author":"Roberts","year":"2003"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2000064.2000086"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.23919\/DATE54114.2022.9774651"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TETC.2023.3257684"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ISVLSI54635.2022.00066"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2020.3017870"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.23919\/DATE58400.2024.10546703"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3394885.3431599"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.23919\/DATE48585.2020.9116549"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3589737.3605964"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TCOMM.2020.3040434"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ESSCIRC53450.2021.9567880"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/IEDM45741.2023.10413787"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3529760"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2644865.2541967"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3007787.3001139"},{"key":"ref23","first-page":"1","article-title":"Analog\/mixed-signal hardware error modeling for deep learning inference","volume-title":"Proc. 56th ACM\/IEEE Design Autom. Conf. (DAC)","author":"Rekhi"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/MM.2022.3196865"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ISSCC19947.2020.9062985"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/IEDM.2017.8268425"},{"key":"ref27","article-title":"Hardware security primitives using passive RRAM crossbar array: Novel TRNG and PUF designs","author":"Singh","year":"2022","journal-title":"arXiv:2211.03526"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-024-55380-x"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/LES.2024.3422294"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3400302.3415678"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/IEDM45625.2022.10019387"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/cicc51472.2021.9431558"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.6028\/nist.fips.197-upd1"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/TC.1979.1675428"},{"key":"ref35","article-title":"New security challenges on machine learning inference engine: Chip cloning and model reverse engineering","author":"Huang","year":"2020","journal-title":"arXiv:2003.09739"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1117\/12.452034"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/DAC56929.2023.10247895"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/JXCDC.2019.2923745"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.3390\/electronics9050870"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1016\/j.sse.2022.108554"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.23919\/DATE48585.2020.9116476"},{"key":"ref42","article-title":"Deep residual learning for image recognition","author":"He","year":"2015","journal-title":"arXiv:1512.03385"},{"key":"ref43","article-title":"Network in network","author":"Lin","year":"2014","journal-title":"arXiv:1312.4400"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"issue":"7","key":"ref45","first-page":"1","article-title":"Convolutional deep belief networks on CIFAR-10","volume":"40","author":"Krizhevsky","year":"2010","journal-title":"Unpublished Manuscript"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2211477"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/ETS61313.2024.10567473"},{"key":"ref48","first-page":"1","article-title":"BoMaNet: Boolean masking of an entire neural network","volume-title":"Proc. IEEE\/ACM Int. Conf. Comput. Aided Design (ICCAD)","author":"Dubey"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC45102.2020.9294226"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/JXCDC.2022.3217043"},{"key":"ref51","volume-title":"Top-Down Digital VLSI Design From Architectures to Gate-Level Circuits and FPGAs","author":"Kaeslin","year":"2014"}],"container-title":["IEEE Transactions on Circuits and Systems I: Regular Papers"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/8919\/11174046\/10947061.pdf?arnumber=10947061","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,3,27]],"date-time":"2026-03-27T19:54:15Z","timestamp":1774641255000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10947061\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,10]]},"references-count":51,"journal-issue":{"issue":"10"},"URL":"https:\/\/doi.org\/10.1109\/tcsi.2025.3552902","relation":{},"ISSN":["1549-8328","1558-0806"],"issn-type":[{"value":"1549-8328","type":"print"},{"value":"1558-0806","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,10]]}}}