{"id":"https://openalex.org/W7204751682","doi":"https://doi.org/10.1109/tc.2026.3729147","title":"Secure Hardware Accelerator for Resilience Against Adversarial Attacks in ViTs","display_name":"Secure Hardware Accelerator for Resilience Against Adversarial Attacks in ViTs","publication_year":2026,"publication_date":"2026-08-31","ids":{"openalex":"https://openalex.org/W7204751682","doi":"https://doi.org/10.1109/tc.2026.3729147"},"language":"en","primary_location":{"id":"doi:10.1109/tc.2026.3729147","doi":"https://doi.org/10.1109/tc.2026.3729147","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tc.2026.3729147","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-a","cwts-core","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/tc.2026.3729147","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135471814","display_name":"Deepraj Majumdar","orcid":"https://orcid.org/0009-0003-2327-5488","observed_orcids":["https://orcid.org/0009-0003-2327-5488"]},"institutions":[{"id":"https://openalex.org/I154549908","display_name":"Indian Institute of Technology Jodhpur","ror":"https://ror.org/03yacj906","country_code":"IN","type":"education","lineage":["https://openalex.org/I154549908"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Deepraj Majumdar","raw_affiliation_strings":["IIT Jodhpur"],"raw_orcid":"https://orcid.org/0009-0003-2327-5488","affiliations":[{"raw_affiliation_string":"IIT Jodhpur","institution_ids":["https://openalex.org/I154549908"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139714994","display_name":"Anadi Goyal","orcid":"https://orcid.org/0009-0009-2718-8094","observed_orcids":["https://orcid.org/0009-0009-2718-8094"]},"institutions":[{"id":"https://openalex.org/I154549908","display_name":"Indian Institute of Technology Jodhpur","ror":"https://ror.org/03yacj906","country_code":"IN","type":"education","lineage":["https://openalex.org/I154549908"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Anadi Goyal","raw_affiliation_strings":["IIT Jodhpur"],"raw_orcid":"https://orcid.org/0009-0009-2718-8094","affiliations":[{"raw_affiliation_string":"IIT Jodhpur","institution_ids":["https://openalex.org/I154549908"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012290807","display_name":"Sparsh Mittal","orcid":"https://orcid.org/0000-0002-2908-993X","observed_orcids":["https://orcid.org/0000-0002-2908-993X"]},"institutions":[{"id":"https://openalex.org/I154851008","display_name":"Indian Institute of Technology Roorkee","ror":"https://ror.org/00582g326","country_code":"IN","type":"education","lineage":["https://openalex.org/I154851008"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sparsh Mittal","raw_affiliation_strings":["IIT Roorkee"],"raw_orcid":"https://orcid.org/0000-0002-2908-993X","affiliations":[{"raw_affiliation_string":"IIT Roorkee","institution_ids":["https://openalex.org/I154851008"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028509145","display_name":"Shirshendu Das","orcid":"https://orcid.org/0000-0002-1453-229X","observed_orcids":["https://orcid.org/0000-0002-1453-229X"]},"institutions":[{"id":"https://openalex.org/I65181880","display_name":"Indian Institute of Technology Hyderabad","ror":"https://ror.org/01j4v3x97","country_code":"IN","type":"education","lineage":["https://openalex.org/I65181880"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Shirshendu Das","raw_affiliation_strings":["IIT Hyderabad"],"raw_orcid":"https://orcid.org/0000-0002-1453-229X","affiliations":[{"raw_affiliation_string":"IIT Hyderabad","institution_ids":["https://openalex.org/I65181880"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5021176902","display_name":"Palash Das","orcid":"https://orcid.org/0000-0002-1979-0298","observed_orcids":["https://orcid.org/0000-0002-1979-0298"]},"institutions":[{"id":"https://openalex.org/I154549908","display_name":"Indian Institute of Technology Jodhpur","ror":"https://ror.org/03yacj906","country_code":"IN","type":"education","lineage":["https://openalex.org/I154549908"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Palash Das","raw_affiliation_strings":["IIT Jodhpur"],"raw_orcid":"https://orcid.org/0000-0002-1979-0298","affiliations":[{"raw_affiliation_string":"IIT Jodhpur","institution_ids":["https://openalex.org/I154549908"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":{"value":2645,"currency":"USD","value_usd":2645},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.62322101,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"75","issue":"11","first_page":"4055","last_page":"4068"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5439000129699707,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5439000129699707,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.37229999899864197,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.027400000020861626,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hardware-accelerators","display_name":"hardware accelerators","score":0.7319999933242798},{"id":"https://openalex.org/keywords/vision-transformer","display_name":"vision transformer","score":0.628000020980835},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.9570000171661377},{"id":"https://openalex.org/keywords/robustness","display_name":"robustness","score":0.6669999957084656},{"id":"https://openalex.org/keywords/hardware-security","display_name":"hardware security","score":0.6669999957084656}],"concepts":[{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.7703999876976013},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7386999726295471},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5616999864578247},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5037999749183655},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4309999942779541},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.37929999828338623},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3750999867916107},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.36640000343322754},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.36010000109672546},{"id":"https://openalex.org/C39217717","wikidata":"https://www.wikidata.org/wiki/Q1432354","display_name":"Hardware security module","level":3,"score":0.358599990606308},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.31630000472068787},{"id":"https://openalex.org/C42935608","wikidata":"https://www.wikidata.org/wiki/Q190411","display_name":"Field-programmable gate array","level":2,"score":0.2669999897480011},{"id":"https://openalex.org/C110406131","wikidata":"https://www.wikidata.org/wiki/Q41349","display_name":"Smart card","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C74172769","wikidata":"https://www.wikidata.org/wiki/Q1446839","display_name":"Routing (electronic design automation)","level":2,"score":0.25360000133514404},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.25119999051094055}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tc.2026.3729147","doi":"https://doi.org/10.1109/tc.2026.3729147","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tc.2026.3729147","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-a","cwts-core","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tc.2026.3729147","doi":"https://doi.org/10.1109/tc.2026.3729147","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tc.2026.3729147","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-a","cwts-core","dongbi-a","jufo-3","norway-2","poland-140","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W2174868984","https://openalex.org/W2243397390","https://openalex.org/W2603766943","https://openalex.org/W2618043096","https://openalex.org/W2947133760","https://openalex.org/W2962710014","https://openalex.org/W3143373604","https://openalex.org/W3145185940","https://openalex.org/W3163711566","https://openalex.org/W3217804443","https://openalex.org/W4205387611","https://openalex.org/W4221166007","https://openalex.org/W4224316098","https://openalex.org/W4312957757","https://openalex.org/W4313182999","https://openalex.org/W4360831786","https://openalex.org/W4360831795","https://openalex.org/W4360832001","https://openalex.org/W4386066100","https://openalex.org/W4390871747","https://openalex.org/W4390873191","https://openalex.org/W4393159840","https://openalex.org/W4396214365","https://openalex.org/W4402753640","https://openalex.org/W4403598517","https://openalex.org/W4408565788","https://openalex.org/W7124712541","https://openalex.org/W7133208581"],"related_works":["https://openalex.org/W4417413628","https://openalex.org/W7167545269","https://openalex.org/W7160099288","https://openalex.org/W4415798822","https://openalex.org/W7222937939","https://openalex.org/W4417352545","https://openalex.org/W7160439731","https://openalex.org/W6959892128","https://openalex.org/W7114823030","https://openalex.org/W6960246301"],"abstract_inverted_index":{"Vision":[0],"Transformers":[1],"(ViTs)":[2],"have":[3],"demonstrated":[4],"exceptional":[5],"performance":[6],"across":[7],"various":[8],"computer":[9],"vision":[10,123],"tasks.":[11],"However,":[12],"their":[13],"susceptibility":[14],"to":[15,121,171],"adversarial":[16,52,64,87,160],"white-box":[17],"attacks":[18,88],"poses":[19],"a":[20,45,68,144],"significant":[21],"risk,":[22],"especially":[23],"in":[24,138],"safety-critical":[25],"applications.":[26],"These":[27],"attacks,":[28],"with":[29],"full":[30],"model":[31,56],"access,":[32],"pose":[33],"severe":[34],"threat":[35],"by":[36,66],"drastically":[37],"reducing":[38],"accuracy.":[39],"In":[40],"response,":[41],"we":[42,141],"propose":[43],"SAMURAI,":[44],"lightweight,":[46],"preprocessing-based":[47],"defense":[48],"pipeline":[49,151],"that":[50,152,165],"mitigates":[51],"perturbations":[53],"without":[54],"requiring":[55,174],"retraining":[57],"or":[58],"architectural":[59],"changes.":[60],"SAMURAI":[61,101,150,166],"defends":[62],"against":[63],"inputs":[65],"applying":[67],"fixed":[69],"sequence":[70],"of":[71,94],"four":[72],"transformations:":[73],"JPEG":[74],"compression,":[75],"resizing":[76],"and":[77,82],"center":[78],"cropping,":[79],"Gaussian":[80],"smoothing,":[81],"normalization.":[83],"This":[84],"process":[85],"disrupts":[86],"while":[89,173],"preserving":[90],"the":[91,95,149,177],"semantic":[92],"integrity":[93],"image.":[96],"Unlike":[97],"computationally":[98],"expensive":[99],"defenses,":[100],"introduces":[102],"minimal":[103],"overhead":[104],"(e.g.,":[105],"0.001x":[106],"for":[107,113,148],"ViT-Large),":[108],"making":[109],"it":[110],"extremely":[111],"lightweight":[112],"real-time":[114],"deployment.":[115],"Furthermore,":[116],"our":[117],"method":[118],"generalizes":[119],"effectively":[120,158],"other":[122],"architectures,":[124],"such":[125],"as":[126],"Convolutional":[127],"Neural":[128],"Networks":[129],"(CNNs),":[130],"demonstrating":[131],"strong":[132],"transferability.":[133],"To":[134],"support":[135],"efficient":[136],"deployment":[137],"resource-constrained":[139],"environments,":[140],"also":[142],"design":[143],"custom":[145],"hardware":[146],"accelerator":[147],"enables":[153],"in-situ":[154],"preprocessing":[155],"within":[156],"accelerators,":[157],"mitigating":[159],"attacks.":[161],"Experimental":[162],"results":[163],"show":[164],"achieves":[167],"robust":[168],"accuracy":[169],"comparable":[170],"state-of-the-art":[172],"only":[175],"0.009x":[176],"computational":[178],"cost.":[179]},"counts_by_year":[],"updated_date":"2026-11-03T10:50:19.383937","created_date":"2026-09-01T00:00:00"}