{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,27]],"date-time":"2026-05-27T17:37:36Z","timestamp":1779903456925,"version":"3.53.1"},"publisher-location":"New York, NY, USA","reference-count":57,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,11,21]],"date-time":"2023-11-21T00:00:00Z","timestamp":1700524800000},"content-version":"vor","delay-in-days":6,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Science Foundationdation CHEST center","award":["1916741"],"award-info":[{"award-number":["1916741"]}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2155029"],"award-info":[{"award-number":["2155029"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,11,15]]},"DOI":"10.1145\/3576915.3616606","type":"proceedings-article","created":{"date-parts":[[2023,11,21]],"date-time":"2023-11-21T12:35:13Z","timestamp":1700570113000},"page":"2024-2037","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":8,"title":["Gotcha! I Know What You Are Doing on the FPGA Cloud: Fingerprinting Co-Located Cloud FPGA Accelerators via Measuring Communication Links"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-8942-7384","authenticated-orcid":false,"given":"Chongzhou","family":"Fang","sequence":"first","affiliation":[{"name":"University of California, Davis, Davis, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-4545-5016","authenticated-orcid":false,"given":"Ning","family":"Miao","sequence":"additional","affiliation":[{"name":"University of California, Davis, Davis, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0254-9246","authenticated-orcid":false,"given":"Han","family":"Wang","sequence":"additional","affiliation":[{"name":"Temple University, Philadelphia, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-0344-3898","authenticated-orcid":false,"given":"Jiacheng","family":"Zhou","sequence":"additional","affiliation":[{"name":"University of California, Davis, Davis, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0163-5449","authenticated-orcid":false,"given":"Tyler","family":"Sheaves","sequence":"additional","affiliation":[{"name":"University of California, Davis, Davis, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6074-535X","authenticated-orcid":false,"given":"John M.","family":"Emmert","sequence":"additional","affiliation":[{"name":"University of Cincinnati, Cincinnati, OH, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4052-8075","authenticated-orcid":false,"given":"Avesta","family":"Sasan","sequence":"additional","affiliation":[{"name":"University of California, Davis, Davis, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8904-4699","authenticated-orcid":false,"given":"Houman","family":"Homayoun","sequence":"additional","affiliation":[{"name":"University of California, Davis, Davis, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,11,21]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"2021. Intel Devcloud. [Online; accessed 10 March 2022]."},{"key":"e_1_3_2_1_2_1","volume-title":"Intel Acceleration Stack for Intel Xeon CPU with FPGAs Core Cache Interface (CCI-P) Reference Manual. [Online","year":"2022","unstructured":"2022. Intel Acceleration Stack for Intel Xeon CPU with FPGAs Core Cache Interface (CCI-P) Reference Manual. [Online; accessed 10 July 2022]."},{"key":"e_1_3_2_1_3_1","volume-title":"intel\/FPGA-Devcloud. [Online","year":"2022","unstructured":"2022. intel\/FPGA-Devcloud. [Online; accessed 10 March 2022]."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/2951913.2976746"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/FDTC.2019.00015"},{"key":"e_1_3_2_1_6_1","volume-title":"Elastic Compute Service: Instance Family. [Online","author":"Cloud Alibaba","year":"2022","unstructured":"Alibaba Cloud. 2022. Elastic Compute Service: Instance Family. [Online; accessed 17 July 2022]."},{"key":"e_1_3_2_1_7_1","volume-title":"Amazon EC2 F1 Instances. [Online","year":"2022","unstructured":"Amazon. 2022. Amazon EC2 F1 Instances. [Online; accessed 10 March 2022]."},{"key":"e_1_3_2_1_8_1","volume-title":"Developer Preview - EC2 Instances (F1) with Programmable Hardware. [Online","author":"Service Amazon Web","year":"2022","unstructured":"Amazon Web Service. 2016. Developer Preview - EC2 Instances (F1) with Programmable Hardware. [Online; accessed 17 July 2022]."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2874767"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/IISWC.2009.5306797"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3007787.3001177"},{"key":"e_1_3_2_1_12_1","volume-title":"Support-vector networks. Machine learning","author":"Cortes Corinna","year":"1995","unstructured":"Corinna Cortes and Vladimir Vapnik. 1995. Support-vector networks. Machine learning, Vol. 20, 3 (1995), 273--297."},{"key":"e_1_3_2_1_13_1","volume-title":"High-level synthesis","author":"Coussy Philippe","unstructured":"Philippe Coussy and Adam Morawiec. 2010. High-level synthesis. Vol. 1. Springer."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00040"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/3543622.3573193"},{"key":"e_1_3_2_1_16_1","unstructured":"Chongzhou Fang Najmeh Nazari Behnam Omidi Han Wang Aditya Puri Manish Arora Setareh Rafatirad Houman Homayoun and Khaled N Khasawneh. 2023. HeteroScore: Evaluating and Mitigating Cloud Security Threats Brought by Heterogeneity. (2023)."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23149"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/72.80230"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196518"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/FPL.2019.00017"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3400302.3415695"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/HOST49136.2021.9702277"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/3534972"},{"key":"e_1_3_2_1_24_1","volume-title":"Automation & Test in Europe Conference & Exhibition (DATE). IEEE, 1007--1010","author":"Ognjen Glamovc","year":"2020","unstructured":"Ognjen Glamovc anin, Louis Coulon, Francesco Regazzoni, and Mirjana Stojilovi\u0107. 2020. Are cloud FPGAs really vulnerable to power analysis attacks?. In 2020 Design, Automation & Test in Europe Conference & Exhibition (DATE). IEEE, 1007--1010."},{"key":"e_1_3_2_1_25_1","volume-title":"Classifying Computations on Multi-Tenant FPGAs. In 2021 58th ACM\/IEEE Design Automation Conference (DAC). IEEE, 1261--1266","author":"Gobulukoglu Mustafa","year":"2021","unstructured":"Mustafa Gobulukoglu, Colin Drewes, William Hunter, Ryan Kastner, and Dustin Richmond. 2021. Classifying Computations on Multi-Tenant FPGAs. In 2021 58th ACM\/IEEE Design Automation Conference (DAC). IEEE, 1261--1266."},{"key":"e_1_3_2_1_26_1","volume-title":"Deep learning","author":"Goodfellow Ian","unstructured":"Ian Goodfellow, Yoshua Bengio, and Aaron Courville. 2016. Deep learning. MIT press."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/ReConFig48160.2019.8994789"},{"key":"e_1_3_2_1_28_1","volume-title":"Proceedings of 3rd international conference on document analysis and recognition","volume":"1","author":"Ho Tin Kam","year":"1995","unstructured":"Tin Kam Ho. 1995. Random decision forests. In Proceedings of 3rd international conference on document analysis and recognition, Vol. 1. IEEE, 278--282."},{"key":"e_1_3_2_1_29_1","volume-title":"Open Programmable Acceleration Engine - Documentation. [Online","year":"2022","unstructured":"Intel. 2017. Open Programmable Acceleration Engine - Documentation. [Online; accessed 10 March 2022]."},{"key":"e_1_3_2_1_30_1","volume-title":"Intel FPGA SDK for opencl pro edition: Programming guide. [Online","year":"2022","unstructured":"Intel. 2022a. Intel FPGA SDK for opencl pro edition: Programming guide. [Online; accessed 10 March 2022]."},{"key":"e_1_3_2_1_31_1","volume-title":"oneAPI Programming Model. [Online","year":"2022","unstructured":"Intel. 2022b. oneAPI Programming Model. [Online; accessed 10 March 2022]."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA.2018.00014"},{"key":"e_1_3_2_1_33_1","volume-title":"Adam: A method for stochastic optimization. arXiv preprint arXiv:1412.6980","author":"Kingma Diederik P","year":"2014","unstructured":"Diederik P Kingma and Jimmy Ba. 2014. Adam: A method for stochastic optimization. arXiv preprint arXiv:1412.6980 (2014)."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ymssp.2020.107398"},{"key":"e_1_3_2_1_35_1","first-page":"3","article-title":"FPGAs and the cloud-An endless tale of virtualization, elasticity and efficiency","volume":"11","author":"Knodel Oliver","year":"2018","unstructured":"Oliver Knodel, Paul R Genssler, Fredo Erxleben, and Rainer G Spallek. 2018. FPGAs and the cloud-An endless tale of virtualization, elasticity and efficiency. International Journal on Advances in Systems and Measurements, Vol. 11, 3-4 (2018), 230--249.","journal-title":"International Journal on Advances in Systems and Measurements"},{"key":"e_1_3_2_1_36_1","volume-title":"Dennis RE Gnad, and Mehdi B Tahoori","author":"Krautter Jonas","year":"2022","unstructured":"Jonas Krautter, Dennis RE Gnad, and Mehdi B Tahoori. 2022. Remote Fault Attacks in Multi-Tenant Cloud FPGAs. IEEE Design & Test (2022)."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2966986.2967054"},{"key":"e_1_3_2_1_38_1","unstructured":"Yann LeCun. 1998. The MNIST database of handwritten digits. http:\/\/yann. lecun. com\/exdb\/mnist\/ (1998)."},{"key":"e_1_3_2_1_39_1","volume-title":"Microsoft unveils Project Brainwave for real-time AI. [Online","author":"Research Microsoft","year":"2022","unstructured":"Microsoft Research. 2017. Microsoft unveils Project Brainwave for real-time AI. [Online; accessed 17 July 2022]."},{"key":"e_1_3_2_1_40_1","volume-title":"Automation & Test in Europe Conference & Exhibition (DATE). IEEE, 1639--1644","author":"Moini Shayan","year":"2021","unstructured":"Shayan Moini, Shanquan Tian, Daniel Holcomb, Jakub Szefer, and Russell Tessier. 2021. Remote power side-channel attacks on BNN accelerators in FPGAs. In 2021 Design, Automation & Test in Europe Conference & Exhibition (DATE). IEEE, 1639--1644."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/HOTCHIPS.2009.7478342"},{"key":"e_1_3_2_1_42_1","volume-title":"Chongzhou Fang, Behnam Omidi, Setareh Rafatirad, Hossein Sayadi, Khaled N Khasawneh, and Houman Homayoun.","author":"Nazari Najmeh","year":"2023","unstructured":"Najmeh Nazari, Hosein Mohammadi Makrani, Chongzhou Fang, Behnam Omidi, Setareh Rafatirad, Hossein Sayadi, Khaled N Khasawneh, and Houman Homayoun. 2023. Adversarial Attacks against Machine Learning-based Resource Provisioning Systems. IEEE Micro (2023)."},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/3230543.3230560"},{"key":"e_1_3_2_1_44_1","volume-title":"Pytorch: An imperative style, high-performance deep learning library. Advances in neural information processing systems","author":"Paszke Adam","year":"2019","unstructured":"Adam Paszke, Sam Gross, Francisco Massa, Adam Lerer, James Bradbury, Gregory Chanan, Trevor Killeen, Zeming Lin, Natalia Gimelshein, Luca Antiga, et al. 2019. Pytorch: An imperative style, high-performance deep learning library. Advances in neural information processing systems, Vol. 32 (2019)."},{"key":"e_1_3_2_1_45_1","volume-title":"DNN Model Architecture Fingerprinting Attack on CPU-GPU Edge Devices. In 2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P). IEEE, 337--355","author":"Patwari Kartik","year":"2022","unstructured":"Kartik Patwari, Syed Mahbub Hafiz, Han Wang, Houman Homayoun, Zubair Shafiq, and Chen-Nee Chuah. 2022. DNN Model Architecture Fingerprinting Attack on CPU-GPU Edge Devices. In 2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P). IEEE, 337--355."},{"key":"e_1_3_2_1_46_1","volume-title":"Scikit-learn: Machine learning in Python. the Journal of machine Learning research","author":"Pedregosa Fabian","year":"2011","unstructured":"Fabian Pedregosa, Ga\u00ebl Varoquaux, Alexandre Gramfort, Vincent Michel, Bertrand Thirion, Olivier Grisel, Mathieu Blondel, Peter Prettenhofer, Ron Weiss, Vincent Dubourg, et al. 2011. Scikit-learn: Machine learning in Python. the Journal of machine Learning research, Vol. 12 (2011), 2825--2830."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/FPL.2019.00038"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/FCCM.2018.00016"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.21437\/Interspeech.2015-354"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2016.2646367"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00059"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/FCCM51124.2021.00035"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/3373087.3375322"},{"key":"e_1_3_2_1_54_1","article-title":"Visualizing data using t-SNE","volume":"9","author":"der Maaten Laurens Van","year":"2008","unstructured":"Laurens Van der Maaten and Geoffrey Hinton. 2008. Visualizing data using t-SNE. Journal of machine learning research, Vol. 9, 11 (2008).","journal-title":"Journal of machine learning research"},{"key":"e_1_3_2_1_55_1","volume-title":"Jackhammer: Efficient rowhammer on heterogeneous fpga-cpu platforms. arXiv preprint arXiv:1912.11523","author":"Weissman Zane","year":"2019","unstructured":"Zane Weissman, Thore Tiemann, Daniel Moghimi, Evan Custodio, Thomas Eisenbarth, and Berk Sunar. 2019. Jackhammer: Efficient rowhammer on heterogeneous fpga-cpu platforms. arXiv preprint arXiv:1912.11523 (2019)."},{"key":"e_1_3_2_1_56_1","volume-title":"Vitis Accel Examples' Repository. [Online","year":"2022","unstructured":"Xilinx. 2020. Vitis Accel Examples' Repository. [Online; accessed 10 March 2022]."},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.000498"}],"event":{"name":"CCS '23: ACM SIGSAC Conference on Computer and Communications Security","location":"Copenhagen Denmark","acronym":"CCS '23","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3576915.3616606","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3576915.3616606","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3576915.3616606","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,21]],"date-time":"2025-08-21T01:45:03Z","timestamp":1755740703000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3576915.3616606"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,11,15]]},"references-count":57,"alternative-id":["10.1145\/3576915.3616606","10.1145\/3576915"],"URL":"https:\/\/doi.org\/10.1145\/3576915.3616606","relation":{},"subject":[],"published":{"date-parts":[[2023,11,15]]},"assertion":[{"value":"2023-11-21","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}