{"id":"https://openalex.org/W4295855742","doi":"https://doi.org/10.1109/aicas54282.2022.9869995","title":"A Survey on Side-Channel-based Reverse Engineering Attacks on Deep Neural Networks","display_name":"A Survey on Side-Channel-based Reverse Engineering Attacks on Deep Neural Networks","publication_year":2022,"publication_date":"2022-06-13","ids":{"openalex":"https://openalex.org/W4295855742","doi":"https://doi.org/10.1109/aicas54282.2022.9869995"},"language":"en","primary_location":{"id":"doi:10.1109/aicas54282.2022.9869995","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aicas54282.2022.9869995","pdf_url":null,"source":{"id":"https://openalex.org/S4363608281","display_name":"2022 IEEE 4th International Conference on Artificial Intelligence Circuits and Systems (AICAS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 4th International Conference on Artificial Intelligence Circuits and Systems (AICAS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100657633","display_name":"Yuntao Liu","orcid":"https://orcid.org/0000-0001-8213-582X"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yuntao Liu","raw_affiliation_strings":["University of Maryland,College Park","University of Maryland, College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland,College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077915520","display_name":"Michael Zuzak","orcid":"https://orcid.org/0000-0003-0356-9393"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael Zuzak","raw_affiliation_strings":["University of Maryland,College Park","University of Maryland, College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland,College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088110281","display_name":"Daniel Xing","orcid":"https://orcid.org/0000-0003-3661-746X"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel Xing","raw_affiliation_strings":["University of Maryland,College Park","University of Maryland, College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland,College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018893485","display_name":"Isaac McDaniel","orcid":"https://orcid.org/0009-0004-4370-7812"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Isaac McDaniel","raw_affiliation_strings":["University of Maryland,College Park","University of Maryland, College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland,College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072105473","display_name":"Priya Mittu","orcid":"https://orcid.org/0000-0002-2587-4957"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Priya Mittu","raw_affiliation_strings":["University of Maryland,College Park","University of Maryland, College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland,College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068813218","display_name":"Olsan Ozbay","orcid":"https://orcid.org/0009-0006-1175-2242"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Olsan Ozbay","raw_affiliation_strings":["University of Maryland,College Park","University of Maryland, College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland,College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024500396","display_name":"Abir Akib","orcid":"https://orcid.org/0000-0002-1455-6662"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abir Akib","raw_affiliation_strings":["University of Maryland,College Park","University of Maryland, College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland,College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089770783","display_name":"Ankur Srivastava","orcid":"https://orcid.org/0000-0002-5445-904X"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ankur Srivastava","raw_affiliation_strings":["University of Maryland,College Park","University of Maryland, College Park"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland,College Park","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"University of Maryland, College Park","institution_ids":["https://openalex.org/I66946132"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I66946132"],"apc_list":null,"apc_paid":null,"fwci":0.1687,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.4170161,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"312","last_page":"315"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.8611332178115845},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.8398274183273315},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.6801564693450928},{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.6554559469223022},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6537374258041382},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.6359297037124634},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5524628162384033},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5469220280647278},{"id":"https://openalex.org/keywords/channel","display_name":"Channel (broadcasting)","score":0.5304360389709473},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.39542895555496216},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.34105104207992554},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3276708126068115},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.22234705090522766},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.14942559599876404},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.086687833070755}],"concepts":[{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.8611332178115845},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.8398274183273315},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.6801564693450928},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.6554559469223022},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6537374258041382},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.6359297037124634},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5524628162384033},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5469220280647278},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.5304360389709473},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39542895555496216},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.34105104207992554},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3276708126068115},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.22234705090522766},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.14942559599876404},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.086687833070755},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/aicas54282.2022.9869995","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aicas54282.2022.9869995","pdf_url":null,"source":{"id":"https://openalex.org/S4363608281","display_name":"2022 IEEE 4th International Conference on Artificial Intelligence Circuits and Systems (AICAS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 4th International Conference on Artificial Intelligence Circuits and Systems (AICAS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.44999998807907104}],"awards":[{"id":"https://openalex.org/G8987407227","display_name":"SaTC: CORE: Small: A High Level Synthesis Approach to Logic Obfuscation","funder_award_id":"1953285","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W1584476834","https://openalex.org/W1686810756","https://openalex.org/W2024540116","https://openalex.org/W2163605009","https://openalex.org/W2166293920","https://openalex.org/W2194775991","https://openalex.org/W2302098303","https://openalex.org/W2511473180","https://openalex.org/W2744509465","https://openalex.org/W2768516003","https://openalex.org/W2792326895","https://openalex.org/W2797889914","https://openalex.org/W2807463593","https://openalex.org/W2809523935","https://openalex.org/W2895073576","https://openalex.org/W2906869444","https://openalex.org/W2925685215","https://openalex.org/W2944442501","https://openalex.org/W2965565691","https://openalex.org/W2974645258","https://openalex.org/W3004850737","https://openalex.org/W3012429193","https://openalex.org/W3029601593","https://openalex.org/W3046853140","https://openalex.org/W3049152512","https://openalex.org/W3082305010","https://openalex.org/W3110986688","https://openalex.org/W3118164462","https://openalex.org/W3145598683","https://openalex.org/W3167904413","https://openalex.org/W3216958329","https://openalex.org/W4289146347","https://openalex.org/W6634823185","https://openalex.org/W6637373629","https://openalex.org/W6684191040","https://openalex.org/W6752265895","https://openalex.org/W6753937820","https://openalex.org/W6755424845","https://openalex.org/W6758096801","https://openalex.org/W6766787143","https://openalex.org/W6778437264"],"related_works":["https://openalex.org/W3123987581","https://openalex.org/W2358406440","https://openalex.org/W2022533428","https://openalex.org/W2580249689","https://openalex.org/W2969678054","https://openalex.org/W2769734684","https://openalex.org/W2352435628","https://openalex.org/W2103519941","https://openalex.org/W2903787673","https://openalex.org/W2777343049"],"abstract_inverted_index":{"Hardware":[0],"side-channels":[1],"have":[2,18],"been":[3,20,28],"exploited":[4],"to":[5],"leak":[6],"sensitive":[7],"information.":[8],"With":[9],"the":[10,31,45,75],"emergence":[11],"of":[12,37,47],"deep":[13,38],"learning,":[14],"their":[15],"hardware":[16,65],"platforms":[17],"also":[19],"scrutinized":[21],"for":[22],"side-channel":[23,54],"information":[24,55],"leakage.":[25,56],"It":[26],"has":[27],"shown":[29],"that":[30,51],"structure,":[32],"weights,":[33],"and":[34],"input":[35],"samples":[36],"neural":[39],"networks":[40],"(DNN)":[41],"can":[42],"all":[43],"be":[44],"victim":[46],"reverse":[48,67],"engineering":[49,68],"attacks":[50,69],"rely":[52],"on":[53,64,70],"In":[57],"this":[58],"paper,":[59],"we":[60],"survey":[61],"existing":[62],"work":[63],"side-channel-based":[66],"DNNs":[71],"as":[72,74],"well":[73],"countermeasures.":[76]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}