{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T00:11:31Z","timestamp":1780445491063,"version":"3.54.1"},"reference-count":27,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,3]]},"DOI":"10.23919\/date.2019.8715027","type":"proceedings-article","created":{"date-parts":[[2019,5,16]],"date-time":"2019-05-16T17:29:07Z","timestamp":1558027747000},"page":"1415-1420","source":"Crossref","is-referenced-by-count":41,"title":["Memory Trojan Attack on Neural Network Accelerators"],"prefix":"10.23919","author":[{"given":"Yang","family":"Zhao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xing","family":"Hu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shuangchen","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jing","family":"Ye","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lei","family":"Deng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yu","family":"Ji","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jianyu","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dong","family":"Wu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuan","family":"Xie","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref10","article-title":"A survey of hardware Trojan taxonomy and detection","volume":"27","author":"tehranipoor","year":"2010","journal-title":"IEEE Design & Test of Computers"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2014.2334493"},{"key":"ref12","article-title":"On the effects of an emulated Memory Trojan on the secure operation of a firewall","author":"chenoweth","year":"0"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2017.8203770"},{"key":"ref14","first-page":"227","article-title":"SIN 2: Stealth infection on neural networkA low-cost agile neural Trojan attack methodology","author":"liu","year":"2018","journal-title":"Host"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ISVLSI.2018.00093"},{"key":"ref16","article-title":"Hardware Trojan attacks on neural networks","author":"clements","year":"2018"},{"key":"ref17","article-title":"Reverse engineering convolutional neural networks through side-channel information leaks","author":"hua","year":"2018","journal-title":"55 th DAC"},{"key":"ref18","author":"jacob","year":"2009","journal-title":"The Memory System"},{"key":"ref19","article-title":"Systolic CNN AcceLErator Simulator (SCALE Sim)","author":"samajdar","year":"0"},{"key":"ref4","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2014"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516660"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref6","article-title":"From model to FPGA: Software-Hardware Co-Design for Efficient Neural Network Acceleration","author":"guo","year":"2016","journal-title":"28th Hot Chips"},{"key":"ref5","article-title":"NVDLA","year":"0"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3007787.3001177"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3195970.3196033"},{"key":"ref2","first-page":"1097","article-title":"Imagenet classification with deep convolutional neural networks","author":"krizhevsky","year":"2012","journal-title":"NIPS"},{"key":"ref9","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2016"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2017.2761740"},{"key":"ref20","article-title":"Fractal geometry: mathematical foundations and applications","author":"falconer","year":"2004"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/s11263-015-0816-y"},{"key":"ref21","article-title":"From mathworls&#x2013;A wolfram web resource","author":"weisstein","year":"0"},{"key":"ref24","article-title":"MNIST handwritten digit databas","author":"lecun","year":"2010"},{"key":"ref23","article-title":"The CIFAR-10 dataset","author":"krizhevsky","year":"2014"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2016.7783725"},{"key":"ref25","article-title":"ImageNet 1-crop error rates (224x224)","year":"0"}],"event":{"name":"2019 Design, Automation & Test in Europe Conference & Exhibition (DATE)","location":"Florence, Italy","start":{"date-parts":[[2019,3,25]]},"end":{"date-parts":[[2019,3,29]]}},"container-title":["2019 Design, Automation &amp; Test in Europe Conference &amp; Exhibition (DATE)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8704855\/8714721\/08715027.pdf?arnumber=8715027","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,6,3]],"date-time":"2019-06-03T19:50:10Z","timestamp":1559591410000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8715027\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,3]]},"references-count":27,"URL":"https:\/\/doi.org\/10.23919\/date.2019.8715027","relation":{},"subject":[],"published":{"date-parts":[[2019,3]]}}}