{"id":"https://openalex.org/W4401329666","doi":"https://doi.org/10.1109/iolts60994.2024.10616065","title":"Camo-DNN: Layer Camouflaging to Protect DNNs against Timing Side-Channel Attacks","display_name":"Camo-DNN: Layer Camouflaging to Protect DNNs against Timing Side-Channel Attacks","publication_year":2024,"publication_date":"2024-07-03","ids":{"openalex":"https://openalex.org/W4401329666","doi":"https://doi.org/10.1109/iolts60994.2024.10616065"},"language":"en","primary_location":{"id":"doi:10.1109/iolts60994.2024.10616065","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/iolts60994.2024.10616065","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE 30th International Symposium on On-Line Testing and Robust System Design (IOLTS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044553058","display_name":"Mahya Morid Ahmadi","orcid":null},"institutions":[{"id":"https://openalex.org/I145847075","display_name":"TU Wien","ror":"https://ror.org/04d836q62","country_code":"AT","type":"education","lineage":["https://openalex.org/I145847075"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Mahya Morid Ahmadi","raw_affiliation_strings":["Technische Universität Wien (TU Wien),Vienna,Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universität Wien (TU Wien),Vienna,Austria","institution_ids":["https://openalex.org/I145847075"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030348801","display_name":"Lilas Alrahis","orcid":"https://orcid.org/0000-0001-9932-6833"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Lilas Alrahis","raw_affiliation_strings":["New York University Abu Dhabi (NYUAD),Division of Engineering,Abu Dhabi,United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University Abu Dhabi (NYUAD),Division of Engineering,Abu Dhabi,United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059987567","display_name":"Ozgur Sinanoglu","orcid":"https://orcid.org/0000-0003-0782-0397"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Ozgur Sinanoglu","raw_affiliation_strings":["New York University Abu Dhabi (NYUAD),Division of Engineering,Abu Dhabi,United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University Abu Dhabi (NYUAD),Division of Engineering,Abu Dhabi,United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005190949","display_name":"Muhammad Shafique","orcid":"https://orcid.org/0000-0002-2607-8135"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Muhammad Shafique","raw_affiliation_strings":["New York University Abu Dhabi (NYUAD),Division of Engineering,Abu Dhabi,United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University Abu Dhabi (NYUAD),Division of Engineering,Abu Dhabi,United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.7539757490158081},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6514297723770142},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.6156578063964844},{"id":"https://openalex.org/keywords/channel","display_name":"Channel (broadcasting)","score":0.5463689565658569},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4356372654438019},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.34028881788253784},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.23820030689239502},{"id":"https://openalex.org/keywords/chemistry","display_name":"Chemistry","score":0.07565554976463318}],"concepts":[{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.7539757490158081},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6514297723770142},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.6156578063964844},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.5463689565658569},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4356372654438019},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34028881788253784},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.23820030689239502},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.07565554976463318},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iolts60994.2024.10616065","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/iolts60994.2024.10616065","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE 30th International Symposium on On-Line Testing and Robust System Design (IOLTS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Climate action","id":"https://metadata.un.org/sdg/13","score":0.6000000238418579}],"awards":[],"funders":[{"id":"https://openalex.org/F4320330069","display_name":"Tamkeen","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W2064675550","https://openalex.org/W2147800946","https://openalex.org/W2429723389","https://openalex.org/W2789304371","https://openalex.org/W2888062646","https://openalex.org/W2964318098","https://openalex.org/W2981708954","https://openalex.org/W3021613070","https://openalex.org/W3035682985","https://openalex.org/W3036397182","https://openalex.org/W3102836279","https://openalex.org/W3118608800","https://openalex.org/W3127436526","https://openalex.org/W3183268554","https://openalex.org/W4210642759","https://openalex.org/W4231164953","https://openalex.org/W4295312788","https://openalex.org/W4312473281","https://openalex.org/W4312663929","https://openalex.org/W6718639682","https://openalex.org/W6749023905","https://openalex.org/W6766978945","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W4323824501","https://openalex.org/W2355552010","https://openalex.org/W2136687465","https://openalex.org/W3016859066","https://openalex.org/W5280335","https://openalex.org/W4200321003","https://openalex.org/W4400339423","https://openalex.org/W3215861253","https://openalex.org/W2159609636","https://openalex.org/W3196561854"],"abstract_inverted_index":{"Extracting":[0],"the":[1,30,50,67,85,90,99,109,130,142],"architecture":[2,125,131],"of":[3,5,102,107,132],"layers":[4,51],"a":[6,53,114],"given":[7,54],"deep":[8],"neural":[9],"network":[10,55],"(DNN)":[11],"through":[12],"hardware-based":[13],"side":[14],"channels":[15],"allows":[16],"adversaries":[17],"to":[18,56,83,97],"steal":[19],"its":[20],"intellectual":[21],"property":[22],"and":[23],"even":[24],"launch":[25],"powerful":[26],"adversarial":[27,143],"attacks":[28,127],"on":[29,145],"target":[31],"system.":[32],"In":[33],"this":[34],"work,":[35],"we":[36,139],"propose":[37],"Camo":[38,71],"$D":[39],"N":[40],"N$,":[41],"an":[42,94],"obfuscation":[43,103],"method":[44],"for":[45],"DNNs":[46,148],"that":[47,122,141],"forces":[48],"all":[49],"in":[52,105],"have":[57],"similar":[58],"execution":[59],"traces,":[60],"preventing":[61],"attack":[62,144],"models":[63],"from":[64],"differentiating":[65],"between":[66],"layers.":[68],"Towards":[69],"this,":[70],"DNN":[72,133],"performs":[73],"various":[74],"layer-obfuscation":[75],"operations,":[76],"e.g.,":[77],"layer":[78,80],"branching":[79],"deepening,":[81],"etc.,":[82],"alter":[84],"run-time":[86],"traces":[87],"while":[88,112],"maintaining":[89,113],"functionality.":[91],"Camo-DNN":[92,136],"deploys":[93],"evolutionary":[95],"algorithm":[96],"find":[98],"best":[100],"combination":[101],"operations":[104],"terms":[106],"maximizing":[108],"security":[110],"level":[111],"user-provided":[115],"latency":[116],"overhead":[117],"budget":[118],"Our":[119],"experiments":[120],"show":[121],"state-of-the-art":[123],"side-channel":[124],"stealing":[126],"cannot":[128],"extract":[129],"protected":[134],"by":[135],"accurately.":[137],"Further,":[138],"highlight":[140],"our":[146],"obfuscated":[147],"are":[149],"unsuccessful.":[150]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}