{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T06:01:01Z","timestamp":1780639261853,"version":"3.54.1"},"reference-count":38,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,4,20]],"date-time":"2026-04-20T00:00:00Z","timestamp":1776643200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,4,20]],"date-time":"2026-04-20T00:00:00Z","timestamp":1776643200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,4,20]]},"DOI":"10.23919\/date69613.2026.11539086","type":"proceedings-article","created":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T19:53:10Z","timestamp":1780602790000},"page":"1-7","source":"Crossref","is-referenced-by-count":0,"title":["Focus Session: Exploring Semantic Leakage in Edge FPGA Implementations of Neural Networks"],"prefix":"10.23919","author":[{"given":"Zhuoran","family":"Liu","sequence":"first","affiliation":[{"name":"Radboud University,Digital Security Group,Nijmegen,The Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Konstantina","family":"Miteloudi","sequence":"additional","affiliation":[{"name":"Radboud University,Digital Security Group,Nijmegen,The Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Durba","family":"Chatterjee","sequence":"additional","affiliation":[{"name":"Radboud University,Digital Security Group,Nijmegen,The Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lejla","family":"Batina","sequence":"additional","affiliation":[{"name":"Radboud University,Digital Security Group,Nijmegen,The Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Subaru new generation eyesight powered by xilinx","year":"2020"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3626202.3637562"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2018.00035"},{"key":"ref4","article-title":"Intriguing properties of neural networks","volume-title":"International Conference on Learning Representations (ICLR)","author":"Szegedy"},{"key":"ref5","article-title":"Stealing part of a production language model","volume-title":"International Conference on Machine Learning (ICML)","author":"Carlini"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref7","article-title":"SoK: neural network extraction through physical side channels","volume-title":"USENIX Security Symposium","author":"Horv\u00e1th"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378460"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-81645-2_7"},{"key":"ref10","article-title":"Can one hear the shape of a neural network?: Snooping the gpu via magnetic side channel","volume-title":"USENIX Security Symposium","author":"Maia"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-61486-6_10"},{"key":"ref12","article-title":"CSI NN: Reverse engineering of neural network architectures through electromagnetic side channel","volume-title":"USENIX Security Symposium","author":"Batina"},{"key":"ref13","doi-asserted-by":"crossref","DOI":"10.1145\/3400302.3416260","article-title":"Machine learning and hardware security: Challenges and opportunities","volume-title":"International Conference on Computer-Aided Design (ICCAD)","author":"Regazzoni"},{"key":"ref14","article-title":"BarraCUDA: Edge gpus do leak dnn weights","volume-title":"USENIX Security Symposium","author":"Horv\u00e1th"},{"key":"ref15","article-title":"Kraken: Higher-order em side-channel attacks on dnns in near and far field","volume-title":"IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)","author":"Horv\u00e1th"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363280"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3274694.3274696"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2023.i2.587-613"},{"key":"ref19","article-title":"Pytorch: An imperative style, high-performance deep learning library","author":"Paszke","year":"2019","journal-title":"Advances in Neural Information Processing Systems (NeurIPS)"},{"key":"ref20","article-title":"Real-world edge neural network implementations leak private interactions through physical side channel","author":"Liu","year":"2025"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3569577"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3373087.3375887"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3020078.3021744"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3242897"},{"key":"ref25","article-title":"Xilinx\/brevitas","author":"Pappalardo","year":"2023"},{"key":"ref26","article-title":"What is PII (personal data)?","year":"2024"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00038"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"ref29","article-title":"Prediction poisoning: Towards defenses against dnn model stealing attacks","volume-title":"International Conference on Learning Representations (ICLR)","author":"Orekondy"},{"key":"ref30","article-title":"Learning multiple layers of features from tiny images","volume-title":"Master\u2019s thesis","author":"Krizhevsky","year":"2009"},{"key":"ref31","article-title":"Qwen technical report","author":"Bai","year":"2023"},{"key":"ref32","article-title":"ZCU104 Evaluation Board"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36400-5_3"},{"key":"ref34","article-title":"FINN"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-38162-6"},{"key":"ref36","article-title":"A testing methodology for side-channel resistance validation","volume-title":"NIST non-invasive attack testing workshop","author":"Goodwill"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS.2005.1465395"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.46586\/tches.v2022.i1.506-556"}],"event":{"name":"2026 Design, Automation & Test in Europe Conference (DATE)","location":"Verona, Italy","start":{"date-parts":[[2026,4,20]]},"end":{"date-parts":[[2026,4,22]]}},"container-title":["2026 Design, Automation & Test in Europe Conference (DATE)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11539023\/11539024\/11539086.pdf?arnumber=11539086","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T05:10:04Z","timestamp":1780636204000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11539086\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,4,20]]},"references-count":38,"URL":"https:\/\/doi.org\/10.23919\/date69613.2026.11539086","relation":{},"subject":[],"published":{"date-parts":[[2026,4,20]]}}}