{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T14:24:27Z","timestamp":1780410267853,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":47,"publisher":"ACM","content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,6,30]]},"DOI":"10.1145\/3765613.3811673","type":"proceedings-article","created":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T13:43:03Z","timestamp":1780407783000},"page":"51-62","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["ArchSnoop: LLM Architecture Snooping via Electromagnetic Side-Channel on Edge Devices"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-2912-9302","authenticated-orcid":false,"given":"Haozhe","family":"Weng","sequence":"first","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-4510-2571","authenticated-orcid":false,"given":"Ruochen","family":"Zhou","sequence":"additional","affiliation":[{"name":"The Hong Kong University of Science and Technology, Clear Water Bay, Hong Kong"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-2034-5608","authenticated-orcid":false,"given":"Yubo","family":"Qu","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1101-0007","authenticated-orcid":false,"given":"Xiaoyu","family":"Ji","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5043-9148","authenticated-orcid":false,"given":"Wenyuan","family":"Xu","sequence":"additional","affiliation":[{"name":"Zhejiang University, Hangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,6,29]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2025.3545032"},{"key":"e_1_3_2_1_2_1","first-page":"515","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Batina Lejla","year":"2019","unstructured":"Lejla Batina, Shivam Bhasin, Dirmanto Jap, and Stjepan Picek. 2019. CSI NN: Reverse engineering of neural network architectures through electromagnetic side channel. In 28th USENIX Security Symposium (USENIX Security 19). 515-532."},{"key":"e_1_3_2_1_3_1","volume-title":"Cross-device profiled side-channel attack with unsupervised domain adaptation. IACR Transactions on Cryptographic Hardware and Embedded Systems","author":"Cao Pei","year":"2021","unstructured":"Pei Cao, Chi Zhang, Xiangjun Lu, and Dawu Gu. 2021. Cross-device profiled side-channel attack with unsupervised domain adaptation. IACR Transactions on Cryptographic Hardware and Embedded Systems (2021), 27-56."},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-81645-2_7"},{"key":"e_1_3_2_1_5_1","first-page":"1","article-title":"Palm: Scaling language modeling with pathways","volume":"24","author":"Chowdhery Aakanksha","year":"2023","unstructured":"Aakanksha Chowdhery, Sharan Narang, Jacob Devlin, Maarten Bosma, Gaurav Mishra, Adam Roberts, Paul Barham, Hyung Won Chung, Charles Sutton, Sebastian Gehrmann, et al., 2023. Palm: Scaling language modeling with pathways. Journal of machine learning research, Vol. 24, 240 (2023), 1-113.","journal-title":"Journal of machine learning research"},{"key":"e_1_3_2_1_6_1","unstructured":"Ettus Research. 2014. USRP B210 USB Software Defined Radio (SDR) Product Page. Ettus Research (a National Instruments Company) SDR Platform Product Kit UB200-KIT. https:\/\/www.ettus.com\/all-products\/ub210-kit\/ Accessed: 2026-02-02."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00001"},{"key":"e_1_3_2_1_8_1","unstructured":"Google DeepMind. 2025. Gemma 3 1B Instruction-Tuned Model Card. Google DeepMind Large Language Model Hugging Face Model Hub Model ID: google\/gemma-3-1b-it. https:\/\/huggingface.co\/google\/gemma-3-1b-it Accessed: 2026-02-02."},{"key":"e_1_3_2_1_9_1","volume-title":"Green Solution Technology Co","year":"2018","unstructured":"Ltd. Green Solution Technology Co., 2018. GS9219 Datasheet. GStek, Confidential Technical Document, Revision: 1P0, Part No. GS9219. http:\/\/www.gstekic.com\/pdf\/GS9219.pdf Accessed: 2026-02-02."},{"key":"e_1_3_2_1_10_1","first-page":"193","volume-title":"Nature","volume":"585","author":"Haque Albert","year":"2020","unstructured":"Albert Haque, Arnold Milstein, and Li Fei-Fei. 2020. Illuminating the dark spaces of healthcare with ambient intelligence. Nature, Vol. 585, 7824 (2020), 193-202."},{"key":"e_1_3_2_1_11_1","volume-title":"Neil Zhenqiang Gong, and Yang Zhang","author":"He Xinlei","year":"2021","unstructured":"Xinlei He, Jinyuan Jia, Michael Backes, Neil Zhenqiang Gong, and Yang Zhang. 2021. Stealing links from graph neural networks. In 30th USENIX security symposium (USENIX security 21). 2669-2686."},{"key":"e_1_3_2_1_12_1","volume-title":"Ian Rackow, Kevin Kulda, Dana Dachman-Soled, and Tudor Dumitra\u015f.","author":"Hong Sanghyun","year":"2018","unstructured":"Sanghyun Hong, Michael Davinroy, Yi?itcan Kaya, Stuart Nevans Locke, Ian Rackow, Kevin Kulda, Dana Dachman-Soled, and Tudor Dumitra\u015f. 2018. Security analysis of deep neural networks operating in the presence of cache side-channel attacks. arXiv preprint arXiv:1810.03487 (2018)."},{"key":"e_1_3_2_1_13_1","volume-title":"Processor Power Delivery Design Guidelines","author":"Intel Corporation","unstructured":"Intel Corporation. 2009. Voltage Regulator-Down (VRD) 11.1: Processor Power Delivery Design Guidelines. Intel Corporation, Design Guidelines, Report No. VRD 11.1. https:\/\/www.intel.cn\/content\/dam\/doc\/design-guide\/voltage-regulator-down-11-1-processor-power-delivery-guidelines.pdf Accessed: 2026-02-02."},{"key":"e_1_3_2_1_14_1","unstructured":"Intel Corporation. 2018. ER6230QI: 3A DC-DC Step-Down Switching Regulator Datasheet. Intel Enpirion Power Solutions Product Datasheet. https:\/\/cdrdv2-public.intel.com\/632698\/er6230qi_14468.pdf Accessed: 2026-02-02."},{"key":"e_1_3_2_1_15_1","volume-title":"International Conference on Smart Card Research and Advanced Applications. Springer, 256-276","author":"Joud Rapha\u00ebl","year":"2023","unstructured":"Rapha\u00ebl Joud, Pierre-Alain Mo\u00ebllic, Simon Ponti\u00e9, and Jean-Baptiste Rigaud. 2023. Like an open book? Read neural network architecture with simple power analysis on 32-bit microcontrollers. In International Conference on Smart Card Research and Advanced Applications. Springer, 256-276."},{"key":"e_1_3_2_1_16_1","volume-title":"Ankur P Parikh, Nicolas Papernot, and Mohit Iyyer.","author":"Krishna Kalpesh","year":"2019","unstructured":"Kalpesh Krishna, Gaurav Singh Tomar, Ankur P Parikh, Nicolas Papernot, and Mohit Iyyer. 2019. Thieves on sesame street! model extraction of bert-based apis. arXiv preprint arXiv:1910.12366 (2019)."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2025.i1.78-103"},{"key":"e_1_3_2_1_18_1","volume-title":"Clairvoyance: Exploiting far-field em emanations of gpu to'' see'' your dnn models through obstacles at a distance,'' in 2022 IEEE Security and Privacy Workshops (SPW).","author":"Liang Sisheng","year":"2022","unstructured":"Sisheng Liang, Zihao Zhan, Fan Yao, Long Cheng, and Zhenkai Zhang. 2022. Clairvoyance: Exploiting far-field em emanations of gpu to'' see'' your dnn models through obstacles at a distance,'' in 2022 IEEE Security and Privacy Workshops (SPW)."},{"key":"e_1_3_2_1_19_1","volume-title":"Real-world Edge Neural Network Implementations Leak Private Interactions Through Physical Side Channel. arXiv preprint arXiv:2501.14512","author":"Liu Zhuoran","year":"2025","unstructured":"Zhuoran Liu, Senna van Hoek, P\u00e9ter Horv\u00e1th, Dirk Lauret, Xiaoyun Xu, and Lejla Batina. 2025. Real-world Edge Neural Network Implementations Leak Private Interactions Through Physical Side Channel. arXiv preprint arXiv:2501.14512 (2025)."},{"key":"e_1_3_2_1_20_1","unstructured":"Knud Lasse Lueth. 2026. State of enterprise IoT 2026: The shift from IoT to autonomous connected operations. IoT Analytics Market Report. https:\/\/iot-analytics.com\/state-of-enterprise-iot-from-iot-autonomous-connected-operations\/ Accessed: 2026-02-27."},{"key":"e_1_3_2_1_21_1","volume-title":"USENIX Security Symposium. 4383-4400","author":"Maia Henrique Teles","year":"2022","unstructured":"Henrique Teles Maia, Chang Xiao, Dingzeyu Li, Eitan Grinspun, and Changxi Zheng. 2022. Can one hear the shape of a neural network?: Snooping the GPU via Magnetic Side Channel.. In USENIX Security Symposium. 4383-4400."},{"key":"e_1_3_2_1_22_1","unstructured":"Meta Platforms Inc. 2024a. Llama 3.2 1B Instruct Model Card. Meta AI Large Language Model Hugging Face Model Hub Model ID: meta-llama\/Llama-3.2-1B-Instruct. https:\/\/huggingface.co\/meta-llama\/Llama-3.2-1B-Instruct Accessed: 2026-02-02."},{"key":"e_1_3_2_1_23_1","unstructured":"Meta Platforms Inc. 2024b. Llama 3.2 3B Instruct Model Card. Meta AI Large Language Model Hugging Face Model Hub Model ID: meta-llama\/Llama-3.2-3B-Instruct. https:\/\/huggingface.co\/meta-llama\/Llama-3.2-3B-Instruct Accessed: 2026-02-02."},{"key":"e_1_3_2_1_24_1","unstructured":"Microsoft Corporation. 2025. Phi-4-Mini Instruct Model Card. Microsoft Research Small Language Model Hugging Face Model Hub Model ID: microsoft\/Phi-4-mini-instruct 3.8B Parameters MIT License. https:\/\/huggingface.co\/microsoft\/Phi-4-mini-instruct Accessed: 2026-02-02."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/HOST55342.2024.10545405"},{"key":"e_1_3_2_1_26_1","volume-title":"Matrix Multiplication Background User's Guide","author":"NVIDIA Corporation","unstructured":"NVIDIA Corporation. 2023. Matrix Multiplication Background User's Guide. NVIDIA Corporation. https:\/\/docs.nvidia.com\/deeplearning\/performance\/pdf\/Matrix-Multiplication-Background-User-Guide.pdf Document Number: DU-09799-001_v001."},{"key":"e_1_3_2_1_27_1","volume-title":"Jetson Orin Nano Super Developer Kit Product Page","author":"NVIDIA Corporation","unstructured":"NVIDIA Corporation. 2024. Jetson Orin Nano Super Developer Kit Product Page. NVIDIA Corporation, Embedded AI Platform, Product Kit. https:\/\/www.nvidia.com\/en-us\/autonomous-machines\/embedded-systems\/jetson-orin\/nano-super-developer-kit\/ Accessed: 2026-02-02."},{"key":"e_1_3_2_1_28_1","volume-title":"TorchVision Models and Pre-trained Weights. Meta AI Research","author":"Team PyTorch","unstructured":"PyTorch Team. 2024. TorchVision Models and Pre-trained Weights. Meta AI Research, Computer Vision Library Documentation, PyTorch Stable Release. https:\/\/pytorch.org\/vision\/stable\/models.html Accessed: 2026-02-02."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2339530.2339576"},{"key":"e_1_3_2_1_30_1","volume-title":"uP1666Q 2\/1-Phase Synchronous-Rectified Buck Controller Datasheet. uPI Semiconductor","author":"Richtek Technology Corporation","unstructured":"Richtek Technology Corporation. 2017. uP1666Q 2\/1-Phase Synchronous-Rectified Buck Controller Datasheet. uPI Semiconductor (Richtek Technology Corporation), DC-DC Controller IC, Product Page, Part No. uP1666Q, NVIDIA Open VReg Type-2 Compliant. https:\/\/www.upi-semi.com\/upisemi\/products\/ic\/dc-dc-controller\/multiple-phase-buck-controller\/up1666q\/ Accessed: 2026-02-02."},{"key":"e_1_3_2_1_31_1","volume-title":"Nonlinear total variation based noise removal algorithms. Physica D: nonlinear phenomena","author":"Rudin Leonid I","year":"1992","unstructured":"Leonid I Rudin, Stanley Osher, and Emad Fatemi. 1992. Nonlinear total variation based noise removal algorithms. Physica D: nonlinear phenomena, Vol. 60, 1-4 (1992), 259-268."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA47549.2020.00020"},{"key":"e_1_3_2_1_33_1","unstructured":"Varun Shenoy and Philip Kiely. 2025. A Guide to LLM Inference and Performance. Baseten Blog Post. https:\/\/www.baseten.co\/blog\/llm-transformer-inference-guide\/ Accessed: 2026-02-02."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-61638-0_11"},{"key":"e_1_3_2_1_35_1","volume-title":"Tongyi Lab","author":"Team Qwen","unstructured":"Qwen Team. 2024a. Qwen2.5 0.5B Instruct Model Card. Tongyi Lab, Alibaba Group, Large Language Model, Hugging Face Model Hub, Model ID: Qwen\/Qwen2.5-0.5B-Instruct, 0.5B Parameters, Apache 2.0 License. https:\/\/huggingface.co\/Qwen\/Qwen2.5-0.5B-Instruct Accessed: 2026-02-02."},{"key":"e_1_3_2_1_36_1","volume-title":"Tongyi Lab","author":"Team Qwen","unstructured":"Qwen Team. 2024b. Qwen2.5 1.5B Instruct Model Card. Tongyi Lab, Alibaba Group, Large Language Model, Hugging Face Model Hub, Model ID: Qwen\/Qwen2.5-1.5B-Instruct, 1.5B Parameters, Apache 2.0 License. https:\/\/huggingface.co\/Qwen\/Qwen2.5-1.5B-Instruct Accessed: 2026-02-02."},{"key":"e_1_3_2_1_37_1","volume-title":"Tongyi Lab","author":"Team Qwen","unstructured":"Qwen Team. 2024c. Qwen2.5 3B Instruct Model Card. Tongyi Lab, Alibaba Group, Large Language Model, Hugging Face Model Hub, Model ID: Qwen\/Qwen2.5-3B-Instruct, 3B Parameters, Apache 2.0 License. https:\/\/huggingface.co\/Qwen\/Qwen2.5-3B-Instruct Accessed: 2026-02-02."},{"key":"e_1_3_2_1_38_1","volume-title":"Tongyi Lab","author":"Team Qwen","unstructured":"Qwen Team. 2025a. Qwen3 0.6B Base Model Card. Tongyi Lab, Alibaba Group, Large Language Model, Hugging Face Model Hub, Model ID: Qwen\/Qwen3-0.6B, 0.6B Parameters, Apache 2.0 License. https:\/\/huggingface.co\/Qwen\/Qwen3-0.6B Accessed: 2026-02-02."},{"key":"e_1_3_2_1_39_1","volume-title":"Tongyi Lab","author":"Team Qwen","unstructured":"Qwen Team. 2025b. Qwen3 1.7B Base Model Card. Tongyi Lab, Alibaba Group, Large Language Model, Hugging Face Model Hub, Model ID: Qwen\/Qwen3-1.7B, 1.7B Parameters, Apache 2.0 License. https:\/\/huggingface.co\/Qwen\/Qwen3-1.7B Accessed: 2026-02-02."},{"key":"e_1_3_2_1_40_1","volume-title":"Llama: Open and efficient foundation language models. arXiv preprint arXiv:2302.13971","author":"Touvron Hugo","year":"2023","unstructured":"Hugo Touvron, Thibaut Lavril, Gautier Izacard, Xavier Martinet, Marie-Anne Lachaux, Timoth\u00e9e Lacroix, Baptiste Rozi\u00e8re, Naman Goyal, Eric Hambro, Faisal Azhar, et al., 2023. Llama: Open and efficient foundation language models. arXiv preprint arXiv:2302.13971 (2023)."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3700410.3702126"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCSII.2020.2973007"},{"key":"e_1_3_2_1_43_1","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Yan Mengjia","year":"2020","unstructured":"Mengjia Yan, Christopher W Fletcher, and Josep Torrellas. 2020. Cache telepathy: Leveraging shared resource attacks to learn architectures. In 29th USENIX Security Symposium (USENIX Security 20). 2003-2020."},{"key":"e_1_3_2_1_44_1","unstructured":"An Yang Anfeng Li Baosong Yang Beichen Zhang Binyuan Hui Bo Zheng Bowen Yu Chang Gao Chengen Huang Chenxu Lv et al. 2025. Qwen3 technical report. arXiv preprint arXiv:2505.09388 (2025)."},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS45731.2020.9180580"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/HOST45689.2020.9300274"},{"key":"e_1_3_2_1_47_1","volume-title":"Hugging Face Model Hub","author":"Zhang Peiyuan","year":"2026","unstructured":"Peiyuan Zhang, Guangtao Zeng, Tianduo Wang, and Wei Lu. 2024. TinyLlama 1.1B Chat v1.0 Model Card. TinyLlama Community, Small Language Model, Hugging Face Model Hub, Model ID: TinyLlama\/TinyLlama-1.1B-Chat-v1.0, 1.1B Parameters, Apache 2.0 License. https:\/\/huggingface.co\/TinyLlama\/TinyLlama-1.1B-Chat-v1.0 Accessed: 2026-02-02."}],"event":{"name":"WiSec '26: 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks","location":"Saarbr\u00fccken Germany","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"]},"container-title":["Proceedings of the 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks"],"original-title":[],"deposited":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T13:45:16Z","timestamp":1780407916000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3765613.3811673"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,29]]},"references-count":47,"alternative-id":["10.1145\/3765613.3811673","10.1145\/3765613"],"URL":"https:\/\/doi.org\/10.1145\/3765613.3811673","relation":{},"subject":[],"published":{"date-parts":[[2026,6,29]]},"assertion":[{"value":"2026-06-29","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}