{"id":"https://openalex.org/W2965565691","doi":null,"title":"{CSI} {NN}: Reverse Engineering of Neural Network Architectures Through Electromagnetic Side Channel","display_name":"{CSI} {NN}: Reverse Engineering of Neural Network Architectures Through Electromagnetic Side Channel","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2965565691","mag":"2965565691"},"language":"en","primary_location":{"id":"pmh:oai:tudelft.nl:uuid:11a33ee9-b556-423c-9ff6-13784e98830e","doi":null,"is_oa":false,"landing_page_url":"http://resolver.tudelft.nl/uuid:11a33ee9-b556-423c-9ff6-13784e98830e","pdf_url":null,"source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference paper"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/2066/207790","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051408740","display_name":"Lejla Batina","orcid":"https://orcid.org/0000-0003-0727-3573","observed_orcids":["https://orcid.org/0000-0003-0727-3573","https://orcid.org/0000-0001-7509-4337"]},"institutions":[{"id":"https://openalex.org/I145872427","display_name":"Radboud University Nijmegen","ror":"https://ror.org/016xsfp80","country_code":"NL","type":"education","lineage":["https://openalex.org/I145872427"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Lejla Batina","raw_affiliation_strings":["Radboud University, the Netherlands"],"raw_orcid":"https://orcid.org/0000-0003-0727-3573","affiliations":[{"raw_affiliation_string":"Radboud University, the Netherlands","institution_ids":["https://openalex.org/I145872427"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081720773","display_name":"Shivam Bhasin","orcid":"https://orcid.org/0000-0002-6903-5127","observed_orcids":["https://orcid.org/0000-0002-6903-5127","https://orcid.org/0000-0002-3958-4934"]},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Shivam Bhasin","raw_affiliation_strings":["Nanyang Technological University; Singapore"],"raw_orcid":"https://orcid.org/0000-0002-6903-5127","affiliations":[{"raw_affiliation_string":"Nanyang Technological University; Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060395435","display_name":"Dirmanto Jap","orcid":"https://orcid.org/0000-0002-3149-9401","observed_orcids":["https://orcid.org/0000-0002-3149-9401"]},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Dirmanto Jap","raw_affiliation_strings":["Nanyang Technological University; Singapore"],"raw_orcid":"https://orcid.org/0000-0002-3149-9401","affiliations":[{"raw_affiliation_string":"Nanyang Technological University; Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024072796","display_name":"Stjepan Picek","orcid":"https://orcid.org/0000-0001-7509-4337","observed_orcids":["https://orcid.org/0000-0001-7509-4337","https://orcid.org/0000-0002-9290-1580"]},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Stjepan Picek","raw_affiliation_strings":["Delft University of Technology, The Netherlands#TAB#"],"raw_orcid":"https://orcid.org/0000-0001-7509-4337","affiliations":[{"raw_affiliation_string":"Delft University of Technology, The Netherlands#TAB#","institution_ids":["https://openalex.org/I98358874"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.728,"has_fulltext":false,"cited_by_count":186,"citation_normalized_percentile":{"value":0.98341689,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"515","last_page":"532"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.46630001068115234,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.46630001068115234,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.31299999356269836,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.09440000355243683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/electromagnetic-emanations","display_name":"electromagnetic emanations","score":0.8450000286102295},{"id":"https://openalex.org/keywords/side-channel-attacks","display_name":"side-channel attacks","score":0.9449999928474426},{"id":"https://openalex.org/keywords/timing-side-channel","display_name":"timing side channels","score":0.765999972820282},{"id":"https://openalex.org/keywords/multilayer-perceptron","display_name":"multilayer perceptron","score":0.8579999804496765},{"id":"https://openalex.org/keywords/convolutional-neural-networks","display_name":"convolutional neural networks","score":0.9990000128746033},{"id":"https://openalex.org/keywords/arm-cortex-m3","display_name":"ARM Cortex-M3","score":0.902999997138977},{"id":"https://openalex.org/keywords/activation-functions","display_name":"activation functions","score":0.6909999847412109},{"id":"https://openalex.org/keywords/passive-attacks","display_name":"passive attacks","score":0.46299999952316284}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7759684324264526},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.6759231686592102},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.6728535890579224},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.6685792207717896},{"id":"https://openalex.org/C173018170","wikidata":"https://www.wikidata.org/wiki/Q165678","display_name":"Microcontroller","level":2,"score":0.5495688319206238},{"id":"https://openalex.org/C168451700","wikidata":"https://www.wikidata.org/wiki/Q1306528","display_name":"Neural engineering","level":2,"score":0.5062078833580017},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.46754828095436096},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.4559392035007477},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45338475704193115},{"id":"https://openalex.org/C60908668","wikidata":"https://www.wikidata.org/wiki/Q690207","display_name":"Perceptron","level":3,"score":0.45025789737701416},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.44069796800613403},{"id":"https://openalex.org/C179717631","wikidata":"https://www.wikidata.org/wiki/Q2991667","display_name":"Multilayer perceptron","level":3,"score":0.4355716109275818},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.42117515206336975},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38477623462677},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.20686888694763184},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.1718028485774994},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.16130641102790833},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"pmh:oai:tudelft.nl:uuid:11a33ee9-b556-423c-9ff6-13784e98830e","doi":null,"is_oa":false,"landing_page_url":"http://resolver.tudelft.nl/uuid:11a33ee9-b556-423c-9ff6-13784e98830e","pdf_url":null,"source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference paper"},{"id":"pmh:ru:oai:repository.ubn.ru.nl:2066/207790","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/2066/207790","pdf_url":null,"source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"CSI NN: Reverse Engineering of Neural Network Architectures Through Electromagnetic Side Channel, 1 - 19. USENIX","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:tud:oai:tudelft.nl:uuid:11a33ee9-b556-423c-9ff6-13784e98830e","doi":null,"is_oa":true,"landing_page_url":"http://resolver.tudelft.nl/uuid:11a33ee9-b556-423c-9ff6-13784e98830e","pdf_url":null,"source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 28th USENIX Security Symposium","raw_type":"info:eu-repo/semantics/conferencepaper"},{"id":"mag:2965565691","doi":null,"is_oa":false,"landing_page_url":"https://www.usenix.org/system/files/sec19-batina.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306421123","display_name":"USENIX Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"USENIX Security Symposium","raw_type":null}],"best_oa_location":{"id":"pmh:ru:oai:repository.ubn.ru.nl:2066/207790","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/2066/207790","pdf_url":null,"source":{"id":"https://openalex.org/S4306401067","display_name":"Radboud Repository (Radboud University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I145872427","host_organization_name":"Radboud University Nijmegen","host_organization_lineage":["https://openalex.org/I145872427"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"CSI NN: Reverse Engineering of Neural Network Architectures Through Electromagnetic Side Channel, 1 - 19. USENIX","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2811276992","https://openalex.org/W7067904305","https://openalex.org/W2984453562","https://openalex.org/W3081274534","https://openalex.org/W3114482311","https://openalex.org/W4392055323","https://openalex.org/W3119909101","https://openalex.org/W3213781409","https://openalex.org/W4390401848","https://openalex.org/W3186456562"],"abstract_inverted_index":{"Machine":[0],"learning":[1,54],"has":[2],"become":[3],"mainstream":[4],"across":[5],"industries.":[6],"Numerous":[7],"examples":[8],"prove":[9],"the":[10,52,90,135,138,143,145,152,154,162,166,172],"validity":[11],"of":[12,56,66,70,94,133,147,156],"it":[13],"for":[14],"security":[15],"applications.":[16],"In":[17],"this":[18,41],"work,":[19],"we":[20,43],"investigate":[21],"how":[22],"to":[23,87],"reverse":[24,170],"engineer":[25,171],"a":[26,60,108,128],"neural":[27,49,82,116,163],"network":[28,83,173],"by":[29],"using":[30,115,174],"side-channel":[31,129,176],"information":[32,177],"such":[33,118,178],"as":[34,51,119,179],"timing":[35,180],"and":[36,47,58,62,79,92,149,159],"electromagnetic":[37],"(EM)":[38],"emanations.":[39],"To":[40],"end,":[42],"consider":[44],"multilayer":[45],"perceptron":[46],"convolutional":[48],"networks":[50,117],"machine":[53],"architectures":[55,84],"choice":[57],"assume":[59],"non-invasive":[61],"passive":[63],"attacker":[64,130,167],"capable":[65,132],"measuring":[67],"those":[68,95],"kinds":[69],"leakages.":[71],"We":[72],"conduct":[73],"all":[74],"experiments":[75,125],"on":[76,101],"real":[77],"data":[78],"commonly":[80],"used":[81,111,141],"in":[85,112,142,151,161],"order":[86],"properly":[88],"assess":[89],"applicability":[91],"extendability":[93],"attacks.":[96],"Practical":[97],"results":[98],"are":[99],"shown":[100],"an":[102],"ARM":[103],"Cortex-M3":[104],"microcontroller,":[105],"which":[106],"is":[107,131],"platform":[109],"often":[110],"pervasive":[113],"applications":[114],"wearables,":[120],"surveillance":[121],"cameras,":[122],"etc.":[123],"Our":[124],"show":[126],"that":[127],"obtaining":[134],"following":[136],"information:":[137],"activation":[139],"functions":[140],"architecture,":[144],"number":[146,155],"layers":[148],"neurons":[150],"layers,":[153],"output":[157],"classes,":[158],"weights":[160],"network.":[164],"Thus,":[165],"can":[168],"effectively":[169],"merely":[175],"or":[181],"EM.":[182]},"counts_by_year":[{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":35},{"year":2023,"cited_by_count":33},{"year":2022,"cited_by_count":29},{"year":2021,"cited_by_count":54},{"year":2020,"cited_by_count":24}],"updated_date":"2026-11-05T12:25:35.769452","created_date":"2019-08-13T00:00:00"}