{"id":"https://openalex.org/W3211838634","doi":"https://doi.org/10.1109/dac18074.2021.9586199","title":"SEALing Neural Network Models in Encrypted Deep Learning Accelerators","display_name":"SEALing Neural Network Models in Encrypted Deep Learning Accelerators","publication_year":2021,"publication_date":"2021-11-08","ids":{"openalex":"https://openalex.org/W3211838634","doi":"https://doi.org/10.1109/dac18074.2021.9586199","mag":"3211838634"},"language":"en","primary_location":{"id":"doi:10.1109/dac18074.2021.9586199","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dac18074.2021.9586199","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 58th ACM/IEEE Design Automation Conference (DAC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034442315","display_name":"Pengfei Zuo","orcid":"https://orcid.org/0000-0001-9982-5130"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]},{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Pengfei Zuo","raw_affiliation_strings":["Huazhong University of Science and Technology","University of California, Santa Barbara"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]},{"raw_affiliation_string":"University of California, Santa Barbara","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100584475","display_name":"Yu Hua","orcid":"https://orcid.org/0009-0000-2869-716X"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Hua","raw_affiliation_strings":["Huazhong University of Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064892269","display_name":"Ling Liang","orcid":"https://orcid.org/0000-0002-8534-6494"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ling Liang","raw_affiliation_strings":["Huazhong University of Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047767267","display_name":"Xinfeng Xie","orcid":"https://orcid.org/0000-0001-7285-6682"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinfeng Xie","raw_affiliation_strings":["Huazhong University of Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101964036","display_name":"Xing Hu","orcid":"https://orcid.org/0000-0002-9979-0561"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xing Hu","raw_affiliation_strings":["SKL of Computer Architecture, Institute of Computing Technology, Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SKL of Computer Architecture, Institute of Computing Technology, Chinese Academy of Sciences","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100385336","display_name":"Yuan Xie","orcid":"https://orcid.org/0000-0003-2093-1788"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuan Xie","raw_affiliation_strings":["Huazhong University of Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology","institution_ids":["https://openalex.org/I47720641"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4652,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":{"value":0.85674326,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1255","last_page":"1260"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8104605674743652},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.7866858839988708},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4806565046310425},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.47271081805229187},{"id":"https://openalex.org/keywords/disk-encryption","display_name":"Disk encryption","score":0.43526121973991394},{"id":"https://openalex.org/keywords/dram","display_name":"Dram","score":0.41198158264160156},{"id":"https://openalex.org/keywords/on-the-fly-encryption","display_name":"On-the-fly encryption","score":0.3236575126647949},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.30035126209259033},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.2776518166065216},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.16262274980545044}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8104605674743652},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.7866858839988708},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4806565046310425},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.47271081805229187},{"id":"https://openalex.org/C9368797","wikidata":"https://www.wikidata.org/wiki/Q117010","display_name":"Disk encryption","level":4,"score":0.43526121973991394},{"id":"https://openalex.org/C7366592","wikidata":"https://www.wikidata.org/wiki/Q1255620","display_name":"Dram","level":2,"score":0.41198158264160156},{"id":"https://openalex.org/C147977885","wikidata":"https://www.wikidata.org/wiki/Q117010","display_name":"On-the-fly encryption","level":3,"score":0.3236575126647949},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.30035126209259033},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.2776518166065216},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.16262274980545044}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/dac18074.2021.9586199","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dac18074.2021.9586199","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 58th ACM/IEEE Design Automation Conference (DAC)","raw_type":"proceedings-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-132934","is_oa":false,"landing_page_url":"http://lbdiscover.ust.hk/uresolver?url_ver=Z39.88-2004&rft_val_fmt=info:ofi/fmt:kev:mtx:journal&rfr_id=info:sid/HKUST:SPI&rft.genre=article&rft.issn=0738-100X&rft.volume=2021-December&rft.issue=&rft.date=2021&rft.spage=1255&rft.aulast=Zuo&rft.aufirst=Pengfei&rft.atitle=SEALing+Neural+Network+Models+in+Encrypted+Deep+Learning+Accelerators&rft.title=Proceedings+-+Design+Automation+Conference","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320311687","display_name":"Ministry of Education","ror":"https://ror.org/03m01yf64"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1677182931","https://openalex.org/W1686810756","https://openalex.org/W1979527452","https://openalex.org/W1997782453","https://openalex.org/W2099471712","https://openalex.org/W2106550259","https://openalex.org/W2141225058","https://openalex.org/W2151396176","https://openalex.org/W2154617277","https://openalex.org/W2162136091","https://openalex.org/W2194775991","https://openalex.org/W2460937040","https://openalex.org/W2576037784","https://openalex.org/W2603766943","https://openalex.org/W2809523935","https://openalex.org/W2809895662","https://openalex.org/W2891810898","https://openalex.org/W2899435347","https://openalex.org/W2962835968","https://openalex.org/W2962965870","https://openalex.org/W2979935438","https://openalex.org/W2997394243","https://openalex.org/W3070232965","https://openalex.org/W3102836279","https://openalex.org/W3118608800","https://openalex.org/W4246001895","https://openalex.org/W4256432562","https://openalex.org/W4300511536","https://openalex.org/W4320013936","https://openalex.org/W6637373629","https://openalex.org/W6719080892","https://openalex.org/W6726275242","https://openalex.org/W6732215895","https://openalex.org/W6755958147"],"related_works":["https://openalex.org/W2915067502","https://openalex.org/W4252560333","https://openalex.org/W3214026606","https://openalex.org/W4315815885","https://openalex.org/W2768263982","https://openalex.org/W2379631527","https://openalex.org/W2231057570","https://openalex.org/W4242128914","https://openalex.org/W4327860253","https://openalex.org/W4313218192"],"abstract_inverted_index":{"Deep":[0],"learning":[1],"(DL)":[2],"accelerators":[3,50,119],"suffer":[4],"from":[5],"a":[6,103,129],"new":[7],"security":[8,143],"problem,":[9,98],"i.e.,":[10],"being":[11],"vulnerable":[12],"to":[13,51,82,112,150,161],"physical":[14],"access":[15,124],"based":[16],"attacks.":[17],"An":[18],"adversary":[19],"can":[20],"easily":[21],"obtain":[22],"the":[23,32,37,83,88,92,114,122,142,152,157],"entire":[24],"neural":[25],"network":[26],"(NN)":[27],"model":[28],"by":[29,120],"physically":[30],"snooping":[31],"memory":[33,44,60,89,175],"bus":[34,90],"that":[35,58,63,134],"connects":[36],"accelerator":[38],"chip":[39],"with":[40,173],"DRAM":[41],"memory.":[42],"Therefore,":[43],"encryption":[45,61,93,132,153,176],"becomes":[46],"important":[47],"for":[48,109],"DL":[49,79,118],"improve":[52],"their":[53],"security.":[54,166],"Nevertheless,":[55],"we":[56],"observe":[57],"traditional":[59],"techniques":[62],"have":[64],"been":[65],"efficiently":[66],"used":[67,77],"in":[68,78],"CPU":[69],"systems":[70],"cause":[71],"significant":[72],"performance":[73,115,184],"degradation":[74],"when":[75],"directly":[76],"accelerators,":[80],"due":[81],"big":[84],"bandwidth":[85],"gap":[86],"between":[87],"and":[91,105,147],"engine.":[94],"To":[95],"address":[96],"this":[97],"our":[99],"paper":[100],"proposes":[101],"SEAL,":[102],"Secure":[104],"Efficient":[106],"Accelerator":[107],"scheme":[108,133],"deep":[110],"Learning":[111],"enhance":[113],"of":[116,144,159],"encrypted":[117,163],"improving":[121],"data":[123,137,160],"bandwidth.":[125],"Specifically,":[126],"SEAL":[127,178],"leverages":[128],"criticality-aware":[130],"smart":[131],"identifies":[135],"partial":[136],"having":[138],"no":[139],"impact":[140],"on":[141],"NN":[145],"models":[146],"allows":[148],"them":[149],"bypass":[151],"engine,":[154],"thus":[155],"reducing":[156],"amount":[158],"be":[162],"without":[164],"affecting":[165],"Extensive":[167],"experimental":[168],"results":[169],"demonstrate":[170],"that,":[171],"compared":[172],"existing":[174],"techniques,":[177],"achieves":[179],"1.34":[180],"\u2013":[181],"1.4\u00d7":[182],"overall":[183],"improvement.":[185]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
