{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,23]],"date-time":"2026-10-23T11:56:30Z","timestamp":1792756590863,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":81,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:00:00Z","timestamp":1733097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,12,2]]},"DOI":"10.1145\/3658644.3690317","type":"proceedings-article","created":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T12:19:20Z","timestamp":1733746760000},"page":"4346-4360","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":17,"title":["HyperTheft: Thieving Model Weights from TEE-Shielded Neural Networks via Ciphertext Side Channels"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3053-8923","authenticated-orcid":false,"given":"Yuanyuan","family":"Yuan","sequence":"first","affiliation":[{"name":"The Hong Kong University of Science and Technology, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7872-1129","authenticated-orcid":false,"given":"Zhibo","family":"Liu","sequence":"additional","affiliation":[{"name":"The Hong Kong University of Science and Technology, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7215-4856","authenticated-orcid":false,"given":"Sen","family":"Deng","sequence":"additional","affiliation":[{"name":"The Hong Kong University of Science and Technology, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8235-1311","authenticated-orcid":false,"given":"Yanzuo","family":"Chen","sequence":"additional","affiliation":[{"name":"The Hong Kong University of Science and Technology, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0866-0308","authenticated-orcid":false,"given":"Shuai","family":"Wang","sequence":"additional","affiliation":[{"name":"The Hong Kong University of Science and Technology, Hong Kong, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7585-1075","authenticated-orcid":false,"given":"Yinqian","family":"Zhang","sequence":"additional","affiliation":[{"name":"Southern University of Science and Technology, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2970-1391","authenticated-orcid":false,"given":"Zhendong","family":"Su","sequence":"additional","affiliation":[{"name":"ETH Zurich, Zurich, Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"[n. d.]. Research Artifact. https:\/\/github.com\/Yuanyuan-Yuan\/HyperTheft."},{"key":"e_1_3_2_1_2_1","volume-title":"Backpropagation and stochastic gradient descent method. Neurocomputing","year":"1993","unstructured":"Shun-ichi Amari. 1993. Backpropagation and stochastic gradient descent method. Neurocomputing (1993)."},{"key":"e_1_3_2_1_3_1","unstructured":"ARM. 2023. Arm Confidential Compute Architecture software stack. https:\/\/developer.arm.com\/documentation\/den0127\/latest."},{"key":"e_1_3_2_1_4_1","volume-title":"Julien Cohen-Adad, and Ghassan Hamarneh.","author":"Taghanaki Saeid Asgari","year":"2021","unstructured":"Saeid Asgari Taghanaki, Kumar Abhishek, Joseph Paul Cohen, Julien Cohen-Adad, and Ghassan Hamarneh. 2021. Deep semantic segmentation of natural and medical images: a review. Artificial Intelligence Review (2021)."},{"key":"e_1_3_2_1_5_1","volume-title":"CSI NN: Reverse engineering of neural network architectures through electromagnetic side channel. In USENIX Security.","author":"Batina Lejla","year":"2019","unstructured":"Lejla Batina, Shivam Bhasin, Dirmanto Jap, and Stjepan Picek. 2019. CSI NN: Reverse engineering of neural network architectures through electromagnetic side channel. In USENIX Security."},{"key":"e_1_3_2_1_6_1","volume-title":"Representation learning: A review and new perspectives","author":"Bengio Yoshua","year":"2013","unstructured":"Yoshua Bengio, Aaron Courville, and Pascal Vincent. 2013. Representation learning: A review and new perspectives. IEEE T-PAMI (2013)."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/TR.2021.3105697"},{"key":"e_1_3_2_1_8_1","volume-title":"Membership inference attacks from first principles","author":"Carlini Nicholas","unstructured":"Nicholas Carlini, Steve Chien, Milad Nasr, Shuang Song, Andreas Terzis, and Florian Tramer. 2022. Membership inference attacks from first principles. In IEEE S&P."},{"key":"e_1_3_2_1_9_1","volume-title":"Towards evaluating the robustness of neural networks","author":"Carlini Nicholas","unstructured":"Nicholas Carlini and David Wagner. 2017. Towards evaluating the robustness of neural networks. In IEEE S&P."},{"key":"e_1_3_2_1_10_1","unstructured":"Pierre Carru. 2017. Attack ARM TrustZone using Rowhammer. In GreHack."},{"key":"e_1_3_2_1_11_1","volume-title":"Sok: Understanding the prevailing security vulnerabilities in trustzone-assisted tee systems","author":"Cerdeira David","year":"2020","unstructured":"David Cerdeira, Nuno Santos, Pedro Fonseca, and Sandro Pinto. 2020. Sok: Understanding the prevailing security vulnerabilities in trustzone-assisted tee systems. In IEEE S&P."},{"key":"e_1_3_2_1_12_1","unstructured":"Varun Chandrasekaran Kamalika Chaudhuri Irene Giacomelli Somesh Jha and Songbai Yan. 2020. Exploring connections between active learning and model extraction. In USENIX Security."},{"key":"e_1_3_2_1_13_1","volume-title":"A brief review of hypernetworks in deep learning. arXiv preprint arXiv:2306.06955","author":"Chauhan Vinod Kumar","year":"2023","unstructured":"Vinod Kumar Chauhan, Jiandong Zhou, Ping Lu, Soheila Molaei, and David A Clifton. 2023. A brief review of hypernetworks in deep learning. arXiv preprint arXiv:2306.06955 (2023)."},{"key":"e_1_3_2_1_14_1","volume-title":"Intel TDX Demystified: A Top-Down Approach. preprint arXiv:2303.15540","author":"Cheng Pau-Chen","year":"2023","unstructured":"Pau-Chen Cheng, Wojciech Ozga, Enriquillo Valdez, Salman Ahmed, Zhongshu Gu, Hani Jamjoom, Hubertus Franke, and James Bottomley. 2023. Intel TDX Demystified: A Top-Down Approach. preprint arXiv:2303.15540 (2023)."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2012.2211477"},{"key":"e_1_3_2_1_17_1","unstructured":"Sen Deng Mengyuan Li Yining Tang Shuai Wang Shoumeng Yan and Yinqian Zhang. 2023. CipherH: Automated Detection of Ciphertext Side-channel Vulnerabilities in Cryptographic Implementations. In USENIX Security."},{"key":"e_1_3_2_1_18_1","volume-title":"International Conference on Learning Representations.","author":"Dosovitskiy Alexey","year":"2020","unstructured":"Alexey Dosovitskiy, Lucas Beyer, Alexander Kolesnikov, Dirk Weissenborn, Xiaohua Zhai, Thomas Unterthiner, Mostafa Dehghani, Matthias Minderer, Georg Heigold, Sylvain Gelly, et al. 2020. An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale. In International Conference on Learning Representations."},{"key":"e_1_3_2_1_19_1","volume-title":"Maskednet: The first hardware inference engine aiming power side-channel protection","author":"Dubey Anuj","year":"2020","unstructured":"Anuj Dubey, Rosario Cammarota, and Aydin Aysu. 2020. Maskednet: The first hardware inference engine aiming power side-channel protection. In IEEE HOST."},{"key":"e_1_3_2_1_20_1","unstructured":"Jonathan Frankle and Michael Carbin. 2018. The Lottery Ticket Hypothesis: Finding Sparse Trainable Neural Networks. In ICLR."},{"key":"e_1_3_2_1_21_1","volume-title":"Ensemble deep learning: A review. Engineering Applications of Artificial Intelligence","author":"Ganaie Mudasir A","year":"2022","unstructured":"Mudasir A Ganaie, Minghui Hu, AK Malik, M Tanveer, and PN Suganthan. 2022. Ensemble deep learning: A review. Engineering Applications of Artificial Intelligence (2022)."},{"key":"e_1_3_2_1_22_1","volume-title":"DeepTheft: Stealing DNN Model Architectures through Power Side Channel","author":"Gao Yansong","unstructured":"Yansong Gao, Huming Qiu, Zhi Zhang, Binghui Wang, Hua Ma, Alsharif Abuadbba, Minhui Xue, Anmin Fu, and Surya Nepal. 2024. DeepTheft: Stealing DNN Model Architectures through Power Side Channel. In IEEE S&P."},{"key":"e_1_3_2_1_23_1","volume-title":"Ai2: Safety and robustness certification of neural networks with abstract interpretation","author":"Gehr Timon","unstructured":"Timon Gehr, Matthew Mirman, Dana Drachsler-Cohen, Petar Tsankov, Swarat Chaudhuri, and Martin Vechev. 2018. Ai2: Safety and robustness certification of neural networks with abstract interpretation. In IEEE S&P."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/3065913.3065915"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.52"},{"key":"e_1_3_2_1_26_1","volume-title":"HyperNetworks. In International Conference on Learning Representations.","author":"Ha David","year":"2016","unstructured":"David Ha, Andrew M Dai, and Quoc V Le. 2016. HyperNetworks. In International Conference on Learning Representations."},{"key":"e_1_3_2_1_27_1","volume-title":"Ian Rackow, Kevin Kulda, Dana Dachman-Soled, and Tudor Dumitras.","author":"Hong Sanghyun","year":"2018","unstructured":"Sanghyun Hong, Michael Davinroy, Yigitcan Kaya, Stuart Nevans Locke, Ian Rackow, Kevin Kulda, Dana Dachman-Soled, and Tudor Dumitras. 2018. Security analysis of deep neural networks operating in the presence of cache side-channel attacks. arXiv preprint arXiv:1810.03487 (2018)."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3126315"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"crossref","unstructured":"Bin Hu YanWang Jerry Cheng Tianming Zhao Yucheng Xie Xiaonan Guo and Yingying Chen. 2023. Secure and Efficient Mobile DNN Using Trusted Execution Environments. In Asia CCS.","DOI":"10.1145\/3579856.3582820"},{"key":"e_1_3_2_1_30_1","unstructured":"Weizhe Hua Zhiru Zhang and G Edward Suh. 2018. Reverse engineering convolutional neural networks through side-channel information leaks. In DAC."},{"key":"e_1_3_2_1_31_1","volume-title":"3rd gen intel xeon scalable processor for iot. https:\/\/www.intel.com\/content\/www\/us\/en\/products\/docs\/processors\/embedded\/3rd-gen-xeon-scalable-iot-product-brief.html.","unstructured":"Intel. 2023. Product brief, 3rd gen intel xeon scalable processor for iot. https:\/\/www.intel.com\/content\/www\/us\/en\/products\/docs\/processors\/embedded\/3rd-gen-xeon-scalable-iot-product-brief.html."},{"key":"e_1_3_2_1_32_1","unstructured":"Matthew Jagielski Nicholas Carlini David Berthelot Alex Kurakin and Nicolas Papernot. 2020. High accuracy and high fidelity extraction of neural networks. In USENIX Security."},{"key":"e_1_3_2_1_33_1","volume-title":"Supporting intel sgx on multi-socket platforms. Intel Corp","author":"Johnson Simon","year":"2021","unstructured":"Simon Johnson, Raghunandan Makaram, Amy Santoni, and Vinnie Scarlata. 2021. Supporting intel sgx on multi-socket platforms. Intel Corp (2021)."},{"key":"e_1_3_2_1_34_1","unstructured":"Kaggle. 2017. Stock Dataset. https:\/\/www.kaggle.com\/datasets\/borismarjanovic\/price-volume-data-for-all-us-stocks-etfs."},{"key":"e_1_3_2_1_35_1","volume-title":"AMD memory encryption. White paper","author":"Kaplan David","year":"2016","unstructured":"David Kaplan, Jeremy Powell, and Tom Woller. 2016. AMD memory encryption. White paper (2016), 13."},{"key":"e_1_3_2_1_36_1","volume-title":"Junghwan John Rhee, Xiao Yu, Haifeng Chen, Dave (Jing) Tian, and Byoungyoung Lee.","author":"Kim Kyungtae","year":"2020","unstructured":"Kyungtae Kim, Chung Hwan Kim, Junghwan John Rhee, Xiao Yu, Haifeng Chen, Dave (Jing) Tian, and Byoungyoung Lee. 2020. Vessels: efficient and scalable deep learning prediction on trusted processors. In SoCC."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2678373.2665726"},{"key":"e_1_3_2_1_38_1","volume-title":"Adam: A method for stochastic optimization. arXiv preprint arXiv:1412.6980","author":"Kingma Diederik P","year":"2014","unstructured":"Diederik P Kingma and Jimmy Ba. 2014. Adam: A method for stochastic optimization. arXiv preprint arXiv:1412.6980 (2014)."},{"key":"e_1_3_2_1_39_1","unstructured":"Alex Krizhevsky Geoffrey Hinton et al. 2009. Learning multiple layers of features from tiny images. (2009)."},{"key":"e_1_3_2_1_40_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Lee Dayeol","year":"2020","unstructured":"Dayeol Lee, Dongha Jung, Ian T Fang, Chia-Che Tsai, and Raluca Ada Popa. 2020. An Off-Chip attack on hardware enclaves via the memory bus. In 29th USENIX Security Symposium (USENIX Security 20)."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3300061.3345447"},{"key":"e_1_3_2_1_42_1","volume-title":"A systematic look at ciphertext side channels on AMD SEV-SNP","author":"Li Mengyuan","unstructured":"Mengyuan Li, Luca Wilke, Jan Wichelmann, Thomas Eisenbarth, Radu Teodorescu, and Yinqian Zhang. 2022. A systematic look at ciphertext side channels on AMD SEV-SNP. In IEEE S&P."},{"key":"e_1_3_2_1_43_1","volume-title":"CIPHERLEAKS: Breaking Constant-time Cryptography on AMD SEV via the Ciphertext Side Channel. In USENIX Security.","author":"Li Mengyuan","year":"2021","unstructured":"Mengyuan Li, Yinqian Zhang, Huibo Wang, Kang Li, and Yueqiang Cheng. 2021. CIPHERLEAKS: Breaking Constant-time Cryptography on AMD SEV via the Ciphertext Side Channel. In USENIX Security."},{"key":"e_1_3_2_1_44_1","unstructured":"Shaofeng Li Xinyu Wang Minhui Xue Haojin Zhu Zhi Zhang Yansong Gao Wen Wu and Xuemin Sherman Shen. 2024. Yes One-Bit-Flip Matters! Universal DNN Model Inference Depletion with Runtime Code Fault Injection. In USENIX Security."},{"key":"e_1_3_2_1_45_1","unstructured":"Xupeng Li Xuheng Li Christoffer Dall Ronghui Gu Jason Nieh Yousuf Sait and Gareth Stockwell. 2022. Design and verification of the arm confidential compute architecture. In OSDI."},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/3472883.3486988"},{"key":"e_1_3_2_1_47_1","unstructured":"Zheng Li Yiyong Liu Xinlei He Ning Yu Michael Backes and Yang Zhang. 2022. Auditing membership leakages of multi-exit networks. In CCS."},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/3411495.3421356"},{"key":"e_1_3_2_1_49_1","volume-title":"Mario Fritz, and Yang Zhang.","author":"Liu Yugeng","year":"2022","unstructured":"Yugeng Liu, Rui Wen, Xinlei He, Ahmed Salem, Zhikun Zhang, Michael Backes, Emiliano De Cristofaro, Mario Fritz, and Yang Zhang. 2022. ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models. In USENIX Security."},{"key":"e_1_3_2_1_50_1","volume-title":"Vijay Janapa Reddi, and Kim Hazelwood","author":"Luk Chi-Keung","year":"2005","unstructured":"Chi-Keung Luk, Robert Cohn, Robert Muth, Harish Patil, Artur Klauser, Geoff Lowney, Steven Wallace, Vijay Janapa Reddi, and Kim Hazelwood. 2005. Pin: building customized program analysis tools with dynamic instrumentation. In PLDI."},{"key":"e_1_3_2_1_51_1","volume-title":"International Conference on Machine Learning. PMLR, 6682--6691","author":"Malach Eran","year":"2020","unstructured":"Eran Malach, Gilad Yehudai, Shai Shalev-Schwartz, and Ohad Shamir. 2020. Proving the lottery ticket hypothesis: Pruning is all you need. In International Conference on Machine Learning. PMLR, 6682--6691."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3386901.3388946"},{"key":"e_1_3_2_1_53_1","volume-title":"Cachezoom: How SGX amplifies the power of cache attacks. In Cryptographic Hardware and Embedded Systems--CHES.","author":"Moghimi Ahmad","year":"2017","unstructured":"Ahmad Moghimi, Gorka Irazoqui, and Thomas Eisenbarth. 2017. Cachezoom: How SGX amplifies the power of cache attacks. In Cryptographic Hardware and Embedded Systems--CHES."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1007\/10722028_4"},{"key":"e_1_3_2_1_55_1","volume-title":"Varys: Protecting SGX Enclaves from Practical Side-Channel Attacks. In USENIX ATC.","author":"Oleksenko Oleksii","year":"2018","unstructured":"Oleksii Oleksenko, Bohdan Trach, Robert Krahn, Mark Silberstein, and Christof Fetzer. 2018. Varys: Protecting SGX Enclaves from Practical Side-Channel Attacks. In USENIX ATC."},{"key":"e_1_3_2_1_56_1","volume-title":"I know what you trained last summer: A survey on stealing machine learning models and defences. Comput. Surveys","author":"Oliynyk Daryna","year":"2023","unstructured":"Daryna Oliynyk, Rudolf Mayer, and Andreas Rauber. 2023. I know what you trained last summer: A survey on stealing machine learning models and defences. Comput. Surveys (2023)."},{"key":"e_1_3_2_1_57_1","doi-asserted-by":"crossref","unstructured":"Tribhuvanesh Orekondy Bernt Schiele and Mario Fritz. 2019. Knockoff nets: Stealing functionality of black-box models. In CVPR. 4954--4963.","DOI":"10.1109\/CVPR.2019.00509"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"crossref","unstructured":"Nicolas Papernot Patrick McDaniel Ian Goodfellow Somesh Jha Z Berkay Celik and Ananthram Swami. 2017. Practical black-box attacks against machine learning. In ACM Asia CCS. 506--519.","DOI":"10.1145\/3052973.3053009"},{"key":"e_1_3_2_1_59_1","volume-title":"On lines and planes of closest fit to systems of points in space. The London, Edinburgh, and Dublin philosophical magazine and journal of science 2, 11","author":"Pearson Karl","year":"1901","unstructured":"Karl Pearson. 1901. LIII. On lines and planes of closest fit to systems of points in space. The London, Edinburgh, and Dublin philosophical magazine and journal of science 2, 11 (1901), 559--572."},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2022.108889"},{"key":"e_1_3_2_1_61_1","volume-title":"Fan Yao, and Deliang Fan.","author":"Rakin Adnan Siraj","year":"2022","unstructured":"Adnan Siraj Rakin, Md Hafizul Islam Chowdhuryy, Fan Yao, and Deliang Fan. 2022. Deepsteal: Advanced model extractions leveraging efficient weight stealing in memories. In IEEE S&P."},{"key":"e_1_3_2_1_62_1","unstructured":"Adnan Siraj Rakin Zhezhi He and Deliang Fan. 2019. Bit-flip attack: Crushing neural network with progressive bit search. In ICCV."},{"key":"e_1_3_2_1_63_1","volume-title":"Hypergan: A generative model for diverse, performant neural networks. In ICML.","author":"Ratzlaff Neale","year":"2019","unstructured":"Neale Ratzlaff and Li Fuxin. 2019. Hypergan: A generative model for diverse, performant neural networks. In ICML."},{"key":"e_1_3_2_1_64_1","volume-title":"Glow: Graph lowering compiler techniques for neural networks. arXiv preprint","author":"Rotem Nadav","year":"2018","unstructured":"Nadav Rotem, Jordan Fix, Saleem Abdulrasool, Garret Catron, Summer Deng, Roman Dzhabarov, Nick Gibson, James Hegeman, Meghan Lele, Roman Levenstein, et al. 2018. Glow: Graph lowering compiler techniques for neural networks. arXiv preprint (2018)."},{"key":"e_1_3_2_1_65_1","volume-title":"Understanding machine learning: From theory to algorithms","author":"Shalev-Shwartz Shai","unstructured":"Shai Shalev-Shwartz and Shai Ben-David. 2014. Understanding machine learning: From theory to algorithms. Cambridge university press."},{"key":"e_1_3_2_1_66_1","volume-title":"Membership inference attacks against machine learning models","author":"Shokri Reza","unstructured":"Reza Shokri, Marco Stronati, Congzheng Song, and Vitaly Shmatikov. 2017. Membership inference attacks against machine learning models. In IEEE S&P."},{"key":"e_1_3_2_1_67_1","volume-title":"International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment. Springer, 21--41","author":"Stewin Patrick","year":"2012","unstructured":"Patrick Stewin and Iurii Bystrov. 2012. Understanding DMA malware. In International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment. Springer, 21--41."},{"key":"e_1_3_2_1_68_1","unstructured":"Florian Tram\u00e8r Fan Zhang Ari Juels Michael K Reiter and Thomas Ristenpart. [n. d.]. Stealing machine learning models via prediction apis. In USENIX Sec'16."},{"key":"e_1_3_2_1_69_1","doi-asserted-by":"crossref","unstructured":"Wenhao Wang Guoxing Chen Xiaorui Pan Yinqian Zhang XiaoFeng Wang Vincent Bindschaedler Haixu Tang and Carl A Gunter. 2017. Leaky cauldron on the dark land: Understanding memory side-channel hazards in SGX. In CCS.","DOI":"10.1145\/3133956.3134038"},{"key":"e_1_3_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.369"},{"key":"e_1_3_2_1_71_1","volume-title":"Big Numbers-Big Troubles: Systematically Analyzing Nonce Leakage in (EC) DSA Implementations. In 29th USENIX Security Symposium (USENIX Security 20)","author":"Weiser Samuel","year":"2020","unstructured":"Samuel Weiser, David Schrammel, Lukas Bodner, and Raphael Spreitzer. 2020. Big Numbers-Big Troubles: Systematically Analyzing Nonce Leakage in (EC) DSA Implementations. In 29th USENIX Security Symposium (USENIX Security 20). 1767--1784."},{"key":"e_1_3_2_1_72_1","unstructured":"Luca Wilke Jan Wichelmann Anja Rabich and Thomas Eisenbarth. 2023. SEV Step. https:\/\/github.com\/sev-step\/sev-step."},{"key":"e_1_3_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCSII.2020.2973007"},{"key":"e_1_3_2_1_74_1","unstructured":"Mengjia Yan ChristopherWFletcher and Josep Torrellas. [n. d.]. Cache telepathy: Leveraging shared resource attacks to learn DNN architectures. In USENIX Sec'20."},{"key":"e_1_3_2_1_75_1","volume-title":"Adnan Siraj Rakin, and Deliang Fan","author":"Yao Fan","year":"2020","unstructured":"Fan Yao, Adnan Siraj Rakin, and Deliang Fan. 2020. {DeepHammer}: Depleting the intelligence of deep neural networks through targeted chain of bit flips. In USENIX Security."},{"key":"e_1_3_2_1_76_1","volume-title":"Deepem: Deep neural networks model recovery through em side-channel information leakage. In 2020 IEEE HOST.","author":"Yu Honggang","year":"2020","unstructured":"Honggang Yu, Haocheng Ma, Kaichen Yang, Yiqiang Zhao, and Yier Jin. 2020. Deepem: Deep neural networks model recovery through em side-channel information leakage. In 2020 IEEE HOST."},{"key":"e_1_3_2_1_77_1","unstructured":"Honggang Yu Kaichen Yang Teng Zhang Yun-Yun Tsai Tsung-Yi Ho and Yier Jin. 2020. CloudLeak: Large-Scale Deep Learning Models Stealing Through Adversarial Examples.. In NDSS."},{"key":"e_1_3_2_1_78_1","unstructured":"Yuanyuan Yuan Qi Pang and ShuaiWang. 2022. Automated side channel analysis of media software with manifold learning. In USENIX Security."},{"key":"e_1_3_2_1_79_1","volume-title":"No Privacy Left Outside: On the","author":"Zhang Ziqi","unstructured":"Ziqi Zhang, Chen Gong, Yifeng Cai, Yuanyuan Yuan, Bingyan Liu, Ding Li, Yao Guo, and Xiangqun Chen. 2024. No Privacy Left Outside: On the (In-) Security of TEE-Shielded DNN Partition for On-Device ML. In IEEE S&P."},{"key":"e_1_3_2_1_80_1","volume-title":"Hypertransformer: Model generation for supervised and semi-supervised few-shot learning. In ICML.","author":"Zhmoginov Andrey","year":"2022","unstructured":"Andrey Zhmoginov, Mark Sandler, and Maksym Vladymyrov. 2022. Hypertransformer: Model generation for supervised and semi-supervised few-shot learning. In ICML."},{"key":"e_1_3_2_1_81_1","volume-title":"Deconstructing lottery tickets: Zeros, signs, and the supermask. NeuIPS","author":"Zhou Hattie","year":"2019","unstructured":"Hattie Zhou, Janice Lan, Rosanne Liu, and Jason Yosinski. 2019. Deconstructing lottery tickets: Zeros, signs, and the supermask. NeuIPS (2019)."}],"event":{"name":"CCS '24: ACM SIGSAC Conference on Computer and Communications Security","location":"Salt Lake City UT USA","acronym":"CCS '24","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690317","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3658644.3690317","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,22]],"date-time":"2025-08-22T06:08:12Z","timestamp":1755842892000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3658644.3690317"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,2]]},"references-count":81,"alternative-id":["10.1145\/3658644.3690317","10.1145\/3658644"],"URL":"https:\/\/doi.org\/10.1145\/3658644.3690317","relation":{},"subject":[],"published":{"date-parts":[[2024,12,2]]},"assertion":[{"value":"2024-12-09","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}