{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T14:05:09Z","timestamp":1773842709591,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":34,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,7,10]],"date-time":"2022-07-10T00:00:00Z","timestamp":1657411200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100005801","name":"Facebook","doi-asserted-by":"publisher","award":["Fellowship"],"award-info":[{"award-number":["Fellowship"]}],"id":[{"id":"10.13039\/100005801","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CCF-2007832, ECCS-1932501, CCF-2118709"],"award-info":[{"award-number":["CCF-2007832, ECCS-1932501, CCF-2118709"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,7,10]]},"DOI":"10.1145\/3489517.3530439","type":"proceedings-article","created":{"date-parts":[[2022,8,23]],"date-time":"2022-08-23T23:19:29Z","timestamp":1661296769000},"page":"349-354","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":26,"title":["GuardNN"],"prefix":"10.1145","author":[{"given":"Weizhe","family":"Hua","sequence":"first","affiliation":[{"name":"Cornell University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Muhammad","family":"Umar","sequence":"additional","affiliation":[{"name":"Cornell University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiru","family":"Zhang","sequence":"additional","affiliation":[{"name":"Cornell University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"G. Edward","family":"Suh","sequence":"additional","affiliation":[{"name":"Cornell University and Meta AI"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2022,8,23]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/3007787.3001138"},{"key":"e_1_3_2_1_2_1","volume-title":"CSI NN: Reverse Engineering of Neural Network Architectures Through Electromagnetic Side Channel. In USENIX Security.","author":"Batina L.","year":"2019","unstructured":"L. Batina et al. 2019. CSI NN: Reverse Engineering of Neural Network Architectures Through Electromagnetic Side Channel. In USENIX Security."},{"key":"e_1_3_2_1_3_1","unstructured":"N. Dowlin et al. 2016. CryptoNets: Applying Neural Networks to Encrypted Data with High Throughput and Accuracy. In ICML."},{"key":"e_1_3_2_1_4_1","unstructured":"B. Gassend et al. 2003. Caches and hash trees for efficient memory integrity verification. In HPCA."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","unstructured":"S. Gueron. 2016. Memory Encryption for General-Purpose Processors. In S&P.","DOI":"10.1109\/MSP.2016.124"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"crossref","unstructured":"W. Hua et al. 2018. Reverse Engineering Convolutional Neural Networks Through Side-channel Information Leaks. In DAC.","DOI":"10.1145\/3195970.3196105"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"W. Hua et al. 2019. Boosting the Performance of CNN Accelerators with Dynamic Fine-Grained Channel Gating. In MICRO.","DOI":"10.1145\/3352460.3358283"},{"key":"e_1_3_2_1_8_1","unstructured":"W. Hua et al. 2019. Channel Gating Neural Networks. In NeurIPS."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"crossref","unstructured":"W. Hua et al. 2022. Reverse Engineering CNN Models using Side-Channel Attacks. In IEEE Design & Test.","DOI":"10.1109\/MDAT.2022.3151019"},{"key":"e_1_3_2_1_10_1","volume-title":"Telekine: Secure Computing with Cloud GPUs. In NSDI.","author":"Hunt T.","year":"2020","unstructured":"T. Hunt et al. 2020. Telekine: Secure Computing with Cloud GPUs. In NSDI."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"crossref","unstructured":"I. Jang et al. 2019. Heterogeneous Isolated Execution for Commodity GPUs. In ASPLOS.","DOI":"10.1145\/3297858.3304021"},{"key":"e_1_3_2_1_12_1","volume-title":"P Jouppi et al","author":"N.","year":"2017","unstructured":"N. P Jouppi et al. 2017. In-Datacenter Performance Analysis of a Tensor Processing Unit. In ISCA."},{"key":"e_1_3_2_1_13_1","volume-title":"Vessels: Efficient and Scalable Deep Learning Prediction on Trusted Processors. In SoCC.","author":"Kim K.","year":"2020","unstructured":"K. Kim et al. 2020. Vessels: Efficient and Scalable Deep Learning Prediction on Trusted Processors. In SoCC."},{"key":"e_1_3_2_1_14_1","volume-title":"Ramulator: A Fast and Extensible DRAM Simulator. In CAL.","author":"Kim Y.","year":"2016","unstructured":"Y. Kim et al. 2016. Ramulator: A Fast and Extensible DRAM Simulator. In CAL."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"crossref","unstructured":"N. Kumar et al. 2020. CrypTFlow: Secure TensorFlow Inference. In S&P.","DOI":"10.1109\/SP40000.2020.00092"},{"key":"e_1_3_2_1_16_1","volume-title":"Keystone: An Open Framework for Architecting Trusted Execution Environments. In EuroSys.","author":"Lee D.","year":"2020","unstructured":"D. Lee et al. 2020. Keystone: An Open Framework for Architecting Trusted Execution Environments. In EuroSys."},{"key":"e_1_3_2_1_17_1","volume-title":"TNPU: Supporting Trusted Execution with Tree-less Integrity Protection for Neural Processing Unit. In HPCA.","author":"Lee S.","year":"2022","unstructured":"S. Lee et al. 2022. TNPU: Supporting Trusted Execution with Tree-less Integrity Protection for Neural Processing Unit. In HPCA."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3300061.3345447"},{"key":"e_1_3_2_1_19_1","volume-title":"Lloret-Talavera et al","author":"G.","year":"2022","unstructured":"G. Lloret-Talavera et al. 2022. Enabling Homomorphically Encrypted Inference for Large DNN Models. In IEEE TC."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"crossref","unstructured":"F. McKeen et al. 2016. Intel Software Guard Extensions (Intel SGX) Support for Dynamic Memory Management Inside an Enclave. In HASP.","DOI":"10.1145\/2948618.2954331"},{"key":"e_1_3_2_1_21_1","volume-title":"Delphi: A Cryptographic Inference Service for Neural Networks. In USENIX Security.","author":"Mishra P.","year":"2020","unstructured":"P. Mishra et al. 2020. Delphi: A Cryptographic Inference Service for Neural Networks. In USENIX Security."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"crossref","unstructured":"D. Rathee et al. 2020. CrypTFlow2: Practical 2-Party Secure Inference. In CCS.","DOI":"10.1145\/3372297.3417274"},{"key":"e_1_3_2_1_23_1","volume-title":"Cheetah: Optimizing and Accelerating Homomorphic Encryption for Private Inference. In HPCA.","author":"Reagen B.","year":"2021","unstructured":"B. Reagen et al. 2021. Cheetah: Optimizing and Accelerating Homomorphic Encryption for Private Inference. In HPCA."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"crossref","unstructured":"T. Ryffel et al. 2022. AriaNN: Low-Interaction Privacy-Preserving Deep Learning via Function Secret Sharing. In PET.","DOI":"10.2478\/popets-2022-0015"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"crossref","unstructured":"A. Samajdar et al. 2020. A systematic methodology for characterizing scalability of DNN accelerators using SCALE-sim. In ISPASS.","DOI":"10.1109\/ISPASS48437.2020.00016"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"crossref","unstructured":"W. Shan et al. 2019. A 923 Gbps\/W 113-Cycle 2-Sbox Energy-efficient AES Accelerator in 28nm CMOS. In VLSI.","DOI":"10.23919\/VLSIC.2019.8778189"},{"key":"e_1_3_2_1_27_1","volume-title":"Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardware. In ICLR.","author":"Tramer F.","year":"2019","unstructured":"F. Tramer et al. 2019. Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardware. In ICLR."},{"key":"e_1_3_2_1_28_1","volume-title":"Graviton: Trusted Execution Environments on GPUs. In OSDI.","author":"Volos S.","year":"2018","unstructured":"S. Volos et al. 2018. Graviton: Trusted Execution Environments on GPUs. In OSDI."},{"key":"e_1_3_2_1_29_1","volume-title":"FALCON: Honest-Majority Maliciously Secure Framework for Private Deep Learning. In PET.","author":"Wagh S.","year":"2021","unstructured":"S. Wagh et al. 2021. FALCON: Honest-Majority Maliciously Secure Framework for Private Deep Learning. In PET."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"crossref","unstructured":"X. Wang et al. 2019. NPUFort: A Secure Architecture of DNN Accelerator Against Model Inversion Attack. In CF.","DOI":"10.1145\/3310273.3323070"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","unstructured":"L. Wei et al. 2018. I Know What You See: Power Side-Channel Attack on Convolutional Neural Network Accelerators. In ACSAC.","DOI":"10.1145\/3274694.3274696"},{"key":"e_1_3_2_1_32_1","unstructured":"Xilinx. 2018. CHaiDNN-v2: HLS based Deep Neural Network Accelerator Library for Xilinx Ultrascale+ MPSoCs. https:\/\/github.com\/Xilinx\/CHaiDNN."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"crossref","unstructured":"M. Zhao et al. 2022. ShEF: Shielded Enclaves for Cloud FPGAs. In ASPLOS.","DOI":"10.1145\/3503222.3507733"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"crossref","unstructured":"J. Zhu et al. 2020. Enabling Rack-scale Confidential Computing using Heterogeneous Trusted Execution Environment. In S&P.","DOI":"10.1109\/SP40000.2020.00054"}],"event":{"name":"DAC '22: 59th ACM\/IEEE Design Automation Conference","location":"San Francisco California","acronym":"DAC '22","sponsor":["SIGDA ACM Special Interest Group on Design Automation","IEEE CEDA"]},"container-title":["Proceedings of the 59th ACM\/IEEE Design Automation Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3489517.3530439","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3489517.3530439","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3489517.3530439","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:18:39Z","timestamp":1750191519000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3489517.3530439"}},"subtitle":["secure accelerator architecture for privacy-preserving deep learning"],"short-title":[],"issued":{"date-parts":[[2022,7,10]]},"references-count":34,"alternative-id":["10.1145\/3489517.3530439","10.1145\/3489517"],"URL":"https:\/\/doi.org\/10.1145\/3489517.3530439","relation":{},"subject":[],"published":{"date-parts":[[2022,7,10]]},"assertion":[{"value":"2022-08-23","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}