{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,23]],"date-time":"2026-10-23T11:55:13Z","timestamp":1792756513126,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":21,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,6,23]],"date-time":"2024-06-23T00:00:00Z","timestamp":1719100800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2155002"],"award-info":[{"award-number":["CNS-2155002"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2155029"],"award-info":[{"award-number":["CNS-2155029"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,6,23]]},"DOI":"10.1145\/3649329.3657388","type":"proceedings-article","created":{"date-parts":[[2024,11,7]],"date-time":"2024-11-07T19:27:22Z","timestamp":1731007642000},"page":"1-6","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Architectural Whispers: Robust Machine Learning Models Fingerprinting via Frequency Throttling Side-Channels"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3094-9439","authenticated-orcid":false,"given":"Najmeh","family":"Nazari","sequence":"first","affiliation":[{"name":"ECE Dept, University of California, Davis, Davis, CA, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-7208-1985","authenticated-orcid":false,"given":"Chongzhou","family":"Fang","sequence":"additional","affiliation":[{"name":"ECE Dept, University of California, Davis, Davis, CA, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5088-8728","authenticated-orcid":false,"given":"Hosein","family":"Mohammadi Makrani","sequence":"additional","affiliation":[{"name":"ECE Dept, University of California, Davis, Davis, CA, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6724-2093","authenticated-orcid":false,"given":"Behnam","family":"Omidi","sequence":"additional","affiliation":[{"name":"ECE Dept, George Mason University, Fairfax, VA, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0188-5061","authenticated-orcid":false,"given":"Mahdi","family":"Eslamimehr","sequence":"additional","affiliation":[{"name":"UCLA, LA, CA, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2035-8512","authenticated-orcid":false,"given":"Setareh","family":"Rafatirad","sequence":"additional","affiliation":[{"name":"University of California Davis, Davis, --, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4052-8075","authenticated-orcid":false,"given":"Avesta","family":"Sasan","sequence":"additional","affiliation":[{"name":"UC Davis, Davis, CA, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6423-0145","authenticated-orcid":false,"given":"Hossein","family":"Sayadi","sequence":"additional","affiliation":[{"name":"California State University, Long Beach, Long Beach, CA, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2116-2223","authenticated-orcid":false,"given":"Khaled N.","family":"Khasawneh","sequence":"additional","affiliation":[{"name":"George Mason University, Fairfax, VA, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8904-4699","authenticated-orcid":false,"given":"Houman","family":"Homayoun","sequence":"additional","affiliation":[{"name":"University of California Davis, Davis, CA, United States"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,11,7]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"[n. d.]. https:\/\/docs.aws.amazon.com\/whitepapers\/latest\/security-design-of-aws-nitro-system\/the-ec2-approach-to-preventing-side-channels.html."},{"key":"e_1_3_2_1_2_1","unstructured":"[n. d.]. https:\/\/github.com\/sktime\/sktime."},{"key":"e_1_3_2_1_3_1","unstructured":"[n. d.]. https:\/\/huggingface.com."},{"key":"e_1_3_2_1_4_1","volume-title":"28th USENIX Security Symposium.","author":"Lejla","unstructured":"Lejla Batina et al. 2019. CSI NN: Reverse engineering of neural network architectures through electromagnetic side channel. In 28th USENIX Security Symposium."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","unstructured":"Angus Dempster et al. 2020. ROCKET: exceptionally fast and accurate time series classification using random convolutional kernels. Data Mining and Knowledge Discovery 34 5 (2020).","DOI":"10.1007\/s10618-020-00701-z"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"crossref","unstructured":"Gaofeng Dong et al. 2019. Floating-point multiplication timing attack on deep neural network. In SmartIoT. IEEE.","DOI":"10.1109\/SmartIoT.2019.00032"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"crossref","unstructured":"Ben Gras et al. 2020. ABSynthe: Automatic Blackbox Side-channel Synthesis on Commodity Microarchitectures.. In NDSS.","DOI":"10.14722\/ndss.2020.23018"},{"key":"e_1_3_2_1_8_1","unstructured":"Sanghyun Hong et al. 2018. Security analysis of deep neural networks operating in the presence of cache side-channel attacks. arXiv (2018)."},{"key":"e_1_3_2_1_9_1","volume-title":"Deepsniffer: A dnn model extraction framework based on learning architectural hints. In 25th ASPLOS.","author":"Xing Hu","year":"2020","unstructured":"Xing Hu et al. 2020. Deepsniffer: A dnn model extraction framework based on learning architectural hints. In 25th ASPLOS."},{"key":"e_1_3_2_1_10_1","unstructured":"Weizhe Hua et al. 2018. Reverse engineering convolutional neural networks through side-channel information leaks. In 55th DAC."},{"key":"e_1_3_2_1_11_1","unstructured":"2009 Intel. [n. d.]. Power Management in Intel Architecture Servers."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"crossref","unstructured":"Chen Liu et al. 2022. Frequency throttling side-channel attack. In CCCS.","DOI":"10.1145\/3548606.3560682"},{"key":"e_1_3_2_1_13_1","volume-title":"Proceedings of the IEEE CVPR.","author":"Seyed","unstructured":"Seyed Moosavi et al. 2016. Deepfool: a simple and accurate method to fool deep neural networks. In Proceedings of the IEEE CVPR."},{"key":"e_1_3_2_1_14_1","unstructured":"Maria-Irina Nicolae et al. 2018. Adversarial Robustness Toolbox v1. 0.0. arXiv preprint arXiv:1807.01069 (2018)."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"crossref","unstructured":"Kartik Patwari et al. 2022. Dnn model architecture fingerprinting attack on cpu-gpu edge devices. In 7th EuroS&P. IEEE.","DOI":"10.1109\/EuroSP53844.2022.00029"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"crossref","unstructured":"Zirui Peng et al. 2022. Fingerprinting deep neural networks globally via universal adversarial perturbations. In CVPR.","DOI":"10.1109\/CVPR52688.2022.01307"},{"key":"e_1_3_2_1_18_1","volume-title":"Smt-cop: Defeating side-channel attacks on execution units in smt processors. In 28th PACT","author":"Townley Daniel","year":"2019","unstructured":"Daniel Townley and Dmitry Ponomarev. 2019. Smt-cop: Defeating side-channel attacks on execution units in smt processors. In 28th PACT. IEEE."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"crossref","unstructured":"Junyi Wei et al. 2020. Leaky dnn: Stealing deep-learning model secret with gpu context-switching side-channel. In 50th DSN. IEEE.","DOI":"10.1109\/DSN48063.2020.00031"},{"key":"e_1_3_2_1_20_1","unstructured":"Jonah Weiss et al. 2023. EZClone: Improving DNN Model Extraction Attack via Shape Distillation from GPU Execution Profiles. arXiv (2023)."},{"key":"e_1_3_2_1_21_1","article-title":"Open dnn box by power side-channel attack","author":"Yun Xiang","year":"2020","unstructured":"Yun Xiang et al. 2020. Open dnn box by power side-channel attack. IEEE Transactions on Circuits and Systems II 67, 11 (2020).","journal-title":"IEEE Transactions on Circuits and Systems"},{"key":"e_1_3_2_1_22_1","volume-title":"29th USENIX Security Symposium.","author":"Mengjia","unstructured":"Mengjia Yan et al. 2020. Cache telepathy: Leveraging shared resource attacks to learn {DNN} architectures. In 29th USENIX Security Symposium."}],"event":{"name":"DAC '24: 61st ACM\/IEEE Design Automation Conference","location":"San Francisco CA USA","acronym":"DAC '24","sponsor":["SIGDA ACM Special Interest Group on Design Automation","IEEE-CEDA","SIGBED ACM Special Interest Group on Embedded Systems"]},"container-title":["Proceedings of the 61st ACM\/IEEE Design Automation Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3649329.3657388","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3649329.3657388","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3649329.3657388","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T01:18:01Z","timestamp":1750295881000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3649329.3657388"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,6,23]]},"references-count":21,"alternative-id":["10.1145\/3649329.3657388","10.1145\/3649329"],"URL":"https:\/\/doi.org\/10.1145\/3649329.3657388","relation":{},"subject":[],"published":{"date-parts":[[2024,6,23]]},"assertion":[{"value":"2024-11-07","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}