{"id":"https://openalex.org/W3188169042","doi":"https://doi.org/10.1109/iccad51958.2021.9643512","title":"DeepFreeze: Cold Boot Attacks and High Fidelity Model Recovery on Commercial EdgeML Device","display_name":"DeepFreeze: Cold Boot Attacks and High Fidelity Model Recovery on Commercial EdgeML Device","publication_year":2021,"publication_date":"2021-11-01","ids":{"openalex":"https://openalex.org/W3188169042","doi":"https://doi.org/10.1109/iccad51958.2021.9643512","mag":"3188169042"},"language":"en","primary_location":{"id":"doi:10.1109/iccad51958.2021.9643512","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccad51958.2021.9643512","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE/ACM International Conference On Computer Aided Design (ICCAD)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://dr.ntu.edu.sg/bitstream/10356/156094/2/_2021_ICCAD__CBA_for_Edge_ML%20%282%29.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038700576","display_name":"Yoo-Seung Won","orcid":"https://orcid.org/0000-0002-5205-7530"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yoo-Seung Won","raw_affiliation_strings":["Temasek Laboratories, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Temasek Laboratories, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001688604","display_name":"Soham Chatterjee","orcid":"https://orcid.org/0000-0003-0814-8424"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Soham Chatterjee","raw_affiliation_strings":["School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060395435","display_name":"Dirmanto Jap","orcid":"https://orcid.org/0000-0002-3149-9401"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Dirmanto Jap","raw_affiliation_strings":["Temasek Laboratories, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Temasek Laboratories, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002380437","display_name":"Arindam Basu","orcid":"https://orcid.org/0000-0003-1035-8770"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]},{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["HK","SG"],"is_corresponding":false,"raw_author_name":"Arindam Basu","raw_affiliation_strings":["City University of Hong Kong, Hong Kong","School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"City University of Hong Kong, Hong Kong","institution_ids":["https://openalex.org/I168719708"]},{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081720773","display_name":"Shivam Bhasin","orcid":"https://orcid.org/0000-0002-6903-5127"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Shivam Bhasin","raw_affiliation_strings":["Temasek Laboratories, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Temasek Laboratories, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9900000095367432,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7445797920227051},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6440173983573914},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.5745458602905273},{"id":"https://openalex.org/keywords/fidelity","display_name":"Fidelity","score":0.5702410936355591},{"id":"https://openalex.org/keywords/edge-device","display_name":"Edge device","score":0.48372748494148254},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.44107410311698914},{"id":"https://openalex.org/keywords/high-fidelity","display_name":"High fidelity","score":0.4281248450279236},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.391731321811676},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3499320149421692},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1830061376094818},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.1346791684627533},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.10141116380691528}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7445797920227051},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6440173983573914},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.5745458602905273},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.5702410936355591},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.48372748494148254},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.44107410311698914},{"id":"https://openalex.org/C113364801","wikidata":"https://www.wikidata.org/wiki/Q26674","display_name":"High fidelity","level":2,"score":0.4281248450279236},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.391731321811676},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3499320149421692},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1830061376094818},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.1346791684627533},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.10141116380691528},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/iccad51958.2021.9643512","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccad51958.2021.9643512","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE/ACM International Conference On Computer Aided Design (ICCAD)","raw_type":"proceedings-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/156094","is_oa":true,"landing_page_url":"https://hdl.handle.net/10356/156094","pdf_url":"https://dr.ntu.edu.sg/bitstream/10356/156094/2/_2021_ICCAD__CBA_for_Edge_ML%20%282%29.pdf","source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference Paper"}],"best_oa_location":{"id":"pmh:oai:dr.ntu.edu.sg:10356/156094","is_oa":true,"landing_page_url":"https://hdl.handle.net/10356/156094","pdf_url":"https://dr.ntu.edu.sg/bitstream/10356/156094/2/_2021_ICCAD__CBA_for_Edge_ML%20%282%29.pdf","source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference Paper"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5928885788","display_name":null,"funder_award_id":"NRF2018NCR-NCR009-0001","funder_id":"https://openalex.org/F4320320709","funder_display_name":"National Research Foundation Singapore"}],"funders":[{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3188169042.pdf","grobid_xml":"https://content.openalex.org/works/W3188169042.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W86845558","https://openalex.org/W1473189865","https://openalex.org/W1673923490","https://openalex.org/W1821462560","https://openalex.org/W1945616565","https://openalex.org/W2051267297","https://openalex.org/W2175377689","https://openalex.org/W2318019974","https://openalex.org/W2809523935","https://openalex.org/W2921058674","https://openalex.org/W2948811271","https://openalex.org/W2960833983","https://openalex.org/W2963207607","https://openalex.org/W2964153729","https://openalex.org/W2964318098","https://openalex.org/W2964923388","https://openalex.org/W2965565691","https://openalex.org/W2982600570","https://openalex.org/W3008241282","https://openalex.org/W3018424040","https://openalex.org/W3034368386","https://openalex.org/W3092411267","https://openalex.org/W3092516112","https://openalex.org/W3107121737","https://openalex.org/W3114482311","https://openalex.org/W3118164462","https://openalex.org/W3138154797","https://openalex.org/W3197312262","https://openalex.org/W4246001895","https://openalex.org/W4288117700","https://openalex.org/W6628547770","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6718639682","https://openalex.org/W6752265895","https://openalex.org/W6760474066","https://openalex.org/W6763559720","https://openalex.org/W6766787143","https://openalex.org/W6769835879","https://openalex.org/W6775078712"],"related_works":["https://openalex.org/W4313443006","https://openalex.org/W2945374968","https://openalex.org/W4385452045","https://openalex.org/W4293777179","https://openalex.org/W2164070813","https://openalex.org/W2135608140","https://openalex.org/W2895525995","https://openalex.org/W2319626700","https://openalex.org/W3099598016","https://openalex.org/W4319589573"],"abstract_inverted_index":{"EdgeML":[0],"accelerators":[1],"like":[2],"Intel":[3],"Neural":[4],"Compute":[5],"Stick":[6],"2":[7],"(NCS)":[8],"can":[9],"enable":[10],"efficient":[11],"edge-based":[12],"inference":[13],"with":[14,67,72,115],"complex":[15],"pre-trained":[16],"models.":[17],"The":[18,63,78,151],"models":[19],"are":[20],"loaded":[21,58],"in":[22,112,141],"the":[23,53,60,113,138,157,162],"host":[24],"(like":[25],"Raspberry":[26,61],"Pi)":[27],"and":[28,41,56,70,92,164],"then":[29,128],"transferred":[30],"to":[31,51,89,105,120,136,147],"NCS":[32,50,165],"for":[33],"inference.":[34],"In":[35],"this":[36],"paper,":[37],"we":[38],"demonstrate":[39],"practical":[40],"low-cost":[42],"cold":[43,107],"boot":[44,108],"based":[45,132],"model":[46,54,80,91,158],"recovery":[47],"attacks":[48],"on":[49,133],"recover":[52],"architecture":[55,64],"weights,":[57],"from":[59],"Pi.":[62],"is":[65],"recovered":[66,79,142],"100%":[68],"success":[69],"weights":[71,140],"an":[73],"error":[74,117],"rate":[75],"of":[76,85,97,161],"0.04%.":[77],"reports":[81],"maximum":[82],"accuracy":[83,121],"loss":[84,122],"0.5%":[86],"as":[87,123,125],"compared":[88],"original":[90,148],"allows":[93],"high":[94,124],"fidelity":[95],"transfer":[96],"adversarial":[98],"examples.":[99],"We":[100,127],"further":[101],"extend":[102],"our":[103],"study":[104],"other":[106],"attack":[109,153],"setups":[110],"reported":[111],"literature":[114],"higher":[116],"rates":[118],"leading":[119],"70%.":[126],"propose":[129],"a":[130],"methodology":[131],"knowledge":[134],"distillation":[135],"correct":[137],"erroneous":[139],"model,":[143],"even":[144],"without":[145],"access":[146],"training":[149],"data.":[150],"proposed":[152],"remains":[154],"unaffected":[155],"by":[156],"encryption":[159],"features":[160],"OpenVINO":[163],"framework.":[166]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}