{"id":"https://openalex.org/W4294691467","doi":"https://doi.org/10.1109/aicas54282.2022.9869973","title":"High-Fidelity Model Extraction Attacks via Remote Power Monitors","display_name":"High-Fidelity Model Extraction Attacks via Remote Power Monitors","publication_year":2022,"publication_date":"2022-06-13","ids":{"openalex":"https://openalex.org/W4294691467","doi":"https://doi.org/10.1109/aicas54282.2022.9869973"},"language":"en","primary_location":{"id":"doi:10.1109/aicas54282.2022.9869973","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aicas54282.2022.9869973","pdf_url":null,"source":{"id":"https://openalex.org/S4363608281","display_name":"2022 IEEE 4th International Conference on Artificial Intelligence Circuits and Systems (AICAS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 4th International Conference on Artificial Intelligence Circuits and Systems (AICAS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008761074","display_name":"Anuj Dubey","orcid":"https://orcid.org/0000-0002-5111-3609"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anuj Dubey","raw_affiliation_strings":["North Carolina State University,Department of Electrical and Computer Engineering,Raleigh,NC,USA","Department of Electrical and Computer Engineering, North Carolina State University, Raleigh, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"North Carolina State University,Department of Electrical and Computer Engineering,Raleigh,NC,USA","institution_ids":["https://openalex.org/I137902535"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028983037","display_name":"Emre Karabulut","orcid":"https://orcid.org/0000-0003-1606-4108"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Emre Karabulut","raw_affiliation_strings":["North Carolina State University,Department of Electrical and Computer Engineering,Raleigh,NC,USA","Department of Electrical and Computer Engineering, North Carolina State University, Raleigh, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"North Carolina State University,Department of Electrical and Computer Engineering,Raleigh,NC,USA","institution_ids":["https://openalex.org/I137902535"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017485096","display_name":"Amro Awad","orcid":"https://orcid.org/0000-0003-3987-463X"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Amro Awad","raw_affiliation_strings":["North Carolina State University,Department of Electrical and Computer Engineering,Raleigh,NC,USA","Department of Electrical and Computer Engineering, North Carolina State University, Raleigh, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"North Carolina State University,Department of Electrical and Computer Engineering,Raleigh,NC,USA","institution_ids":["https://openalex.org/I137902535"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062027964","display_name":"Ayd\u0131n Aysu","orcid":"https://orcid.org/0000-0002-5530-8710"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aydin Aysu","raw_affiliation_strings":["North Carolina State University,Department of Electrical and Computer Engineering,Raleigh,NC,USA","Department of Electrical and Computer Engineering, North Carolina State University, Raleigh, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"North Carolina State University,Department of Electrical and Computer Engineering,Raleigh,NC,USA","institution_ids":["https://openalex.org/I137902535"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I137902535"],"apc_list":null,"apc_paid":null,"fwci":1.3495,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.83407084,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"328","last_page":"331"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8211872577667236},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.6830438375473022},{"id":"https://openalex.org/keywords/field-programmable-gate-array","display_name":"Field-programmable gate array","score":0.6273744106292725},{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.6202735304832458},{"id":"https://openalex.org/keywords/fidelity","display_name":"Fidelity","score":0.5460377931594849},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.5437870621681213},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.43655121326446533},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4231088161468506},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3860602378845215},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.34367918968200684},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3409479260444641},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2099905014038086},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1271204650402069}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8211872577667236},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.6830438375473022},{"id":"https://openalex.org/C42935608","wikidata":"https://www.wikidata.org/wiki/Q190411","display_name":"Field-programmable gate array","level":2,"score":0.6273744106292725},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.6202735304832458},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.5460377931594849},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.5437870621681213},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.43655121326446533},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4231088161468506},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3860602378845215},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34367918968200684},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3409479260444641},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2099905014038086},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1271204650402069},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/aicas54282.2022.9869973","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aicas54282.2022.9869973","pdf_url":null,"source":{"id":"https://openalex.org/S4363608281","display_name":"2022 IEEE 4th International Conference on Artificial Intelligence Circuits and Systems (AICAS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 4th International Conference on Artificial Intelligence Circuits and Systems (AICAS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.47999998927116394,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1859706193","display_name":"CAREER: Physical Side-Channels Beyond Cryptography: Transforming the Side-Channel Framework for Deep Learning","funder_award_id":"1943245","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1607006990","https://openalex.org/W2018435387","https://openalex.org/W2565125333","https://openalex.org/W2794898833","https://openalex.org/W2965565691","https://openalex.org/W3110986688","https://openalex.org/W3118164462","https://openalex.org/W3132215038","https://openalex.org/W3133606329","https://openalex.org/W3166251174","https://openalex.org/W3183466684","https://openalex.org/W3183712254","https://openalex.org/W3186456562","https://openalex.org/W3209687107","https://openalex.org/W3214131340","https://openalex.org/W4239762439","https://openalex.org/W4288117700","https://openalex.org/W6766787143","https://openalex.org/W6775078712","https://openalex.org/W6798821678","https://openalex.org/W6803409525"],"related_works":["https://openalex.org/W2794898833","https://openalex.org/W3006344745","https://openalex.org/W182679101","https://openalex.org/W2103519941","https://openalex.org/W3180573957","https://openalex.org/W2162805750","https://openalex.org/W2043669269","https://openalex.org/W2329175123","https://openalex.org/W1968560271","https://openalex.org/W2081998479"],"abstract_inverted_index":{"This":[0],"paper":[1],"shows":[2],"the":[3,32,45,52,58,69,72,99,107,118],"first":[4],"side-channel":[5,138],"attack":[6,43,59,73,86],"on":[7,74],"neural":[8],"network":[9],"(NN)":[10],"IPs":[11,124],"through":[12],"a":[13,20,35],"remote":[14,21],"power":[15],"monitor.":[16],"We":[17,90],"demonstrate":[18,91],"that":[19,92],"monitor":[22],"implemented":[23],"with":[24,87,103],"time-to-digital":[25],"converters":[26],"can":[27],"be":[28],"exploited":[29],"to":[30,47,51,61,84,97,132],"steal":[31],"weights":[33,100],"from":[34],"hardware":[36],"implementation":[37,77],"of":[38,71,78,120],"NN":[39,79,122],"inference.":[40],"Such":[41],"an":[42,75,85],"alleviates":[44],"need":[46,131],"have":[48],"physical":[49,88,137],"access":[50],"target":[53],"device":[54],"and":[55,81],"thus":[56],"expands":[57],"vector":[60],"multi-tenant":[62,126],"cloud":[63],"FPGA":[64,76],"platforms.":[65],"Our":[66],"results":[67],"quantify":[68],"effectiveness":[70],"inference":[80],"compare":[82],"it":[83,93],"access.":[89],"is":[94,109],"indeed":[95],"possible":[96],"extract":[98],"using":[101],"DPA":[102],"25000":[104],"traces":[105],"if":[106],"SNR":[108],"sufficient.":[110],"The":[111],"paper,":[112],"therefore,":[113],"motivates":[114],"secure":[115],"virtualization-to":[116],"protect":[117],"confidentiality":[119],"high-valued":[121],"model":[123],"in":[125],"execution":[127],"environments,":[128],"platform":[129],"developers":[130],"employ":[133],"strong":[134],"countermeasures":[135],"against":[136],"attacks.":[139]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}