{"id":"https://openalex.org/W4411725470","doi":"https://doi.org/10.1109/iscas56072.2025.11044032","title":"PUF-based Edge DNN Model IP Protection with Self-obfuscation and Publicly Verifiable Ownership","display_name":"PUF-based Edge DNN Model IP Protection with Self-obfuscation and Publicly Verifiable Ownership","publication_year":2025,"publication_date":"2025-05-25","ids":{"openalex":"https://openalex.org/W4411725470","doi":"https://doi.org/10.1109/iscas56072.2025.11044032"},"language":"en","primary_location":{"id":"doi:10.1109/iscas56072.2025.11044032","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscas56072.2025.11044032","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Symposium on Circuits and Systems (ISCAS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103815492","display_name":"Jingdong Jiang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210116924","display_name":"Chinese University of Hong Kong, Shenzhen","ror":"https://ror.org/02d5ks197","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633","https://openalex.org/I180726961","https://openalex.org/I4210116924"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingdong Jiang","raw_affiliation_strings":["The Chinese University of Hong Kong,School of Science and Engineering,Shenzhen,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Chinese University of Hong Kong,School of Science and Engineering,Shenzhen,China","institution_ids":["https://openalex.org/I4210116924"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061840305","display_name":"Yue Zheng","orcid":"https://orcid.org/0000-0002-4992-6475"},"institutions":[{"id":"https://openalex.org/I4210116924","display_name":"Chinese University of Hong Kong, Shenzhen","ror":"https://ror.org/02d5ks197","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633","https://openalex.org/I180726961","https://openalex.org/I4210116924"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yue Zheng","raw_affiliation_strings":["The Chinese University of Hong Kong,School of Science and Engineering,Shenzhen,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Chinese University of Hong Kong,School of Science and Engineering,Shenzhen,China","institution_ids":["https://openalex.org/I4210116924"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029335324","display_name":"Chip-Hong Chang","orcid":"https://orcid.org/0000-0002-8897-6176"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Chip-Hong Chang","raw_affiliation_strings":["Nanyang Technological University,School of Electrical and Electronic Engineering,Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanyang Technological University,School of Electrical and Electronic Engineering,Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.5087,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.7782194,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13182","display_name":"Quantum-Dot Cellular Automata","score":0.9886000156402588,"subfield":{"id":"https://openalex.org/subfields/1703","display_name":"Computational Theory and Mathematics"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.9311894774436951},{"id":"https://openalex.org/keywords/verifiable-secret-sharing","display_name":"Verifiable secret sharing","score":0.8899822235107422},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6982535123825073},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.6089999675750732},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5243216753005981},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3784371316432953},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.12917381525039673},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.07624650001525879}],"concepts":[{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.9311894774436951},{"id":"https://openalex.org/C85847156","wikidata":"https://www.wikidata.org/wiki/Q59015987","display_name":"Verifiable secret sharing","level":3,"score":0.8899822235107422},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6982535123825073},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.6089999675750732},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5243216753005981},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3784371316432953},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.12917381525039673},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.07624650001525879},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/iscas56072.2025.11044032","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscas56072.2025.11044032","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Symposium on Circuits and Systems (ISCAS)","raw_type":"proceedings-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/183125","is_oa":false,"landing_page_url":"https://2025.ieee-iscas.org/","pdf_url":null,"source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference Paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W2089497633","https://openalex.org/W2115733720","https://openalex.org/W2194775991","https://openalex.org/W2579318729","https://openalex.org/W2749093550","https://openalex.org/W2921567073","https://openalex.org/W2948833786","https://openalex.org/W2994624247","https://openalex.org/W3168768313","https://openalex.org/W4210690620","https://openalex.org/W4292993844","https://openalex.org/W4294690842","https://openalex.org/W4317892558","https://openalex.org/W4386072370","https://openalex.org/W4386231330","https://openalex.org/W4390873918","https://openalex.org/W4402774093","https://openalex.org/W4403278160"],"related_works":["https://openalex.org/W4224216661","https://openalex.org/W2132360941","https://openalex.org/W3210347767","https://openalex.org/W2355730523","https://openalex.org/W152021879","https://openalex.org/W2066014542","https://openalex.org/W67940504","https://openalex.org/W2072918937","https://openalex.org/W2024170198","https://openalex.org/W2365629437"],"abstract_inverted_index":{"Intellectual":[0],"Property":[1],"(IP)":[2],"violation":[3],"poses":[4],"severe":[5],"threats":[6],"to":[7,119,134,152],"Deep":[8],"Neural":[9],"Network":[10],"(DNN)":[11],"models":[12,58,195],"deployed":[13,144],"on":[14,60,123,180,212,223],"easily":[15],"accessible":[16],"edge":[17,44,61,125,206],"devices":[18,62],"for":[19,53],"real-time,":[20],"security-":[21],"and":[22,36,127,137,171,176,188,196,215,219],"saff1ety-critical":[23],"applications.":[24],"Existing":[25],"DNN":[26,57,194],"IP":[27],"protection":[28,55],"schemes":[29],"lack":[30],"consideration":[31],"of":[32,39,43,56,76,85,110,164,178],"hardware":[33],"attack":[34],"vectors":[35],"fall":[37],"short":[38],"the":[40,81,107,132,157,189,204],"security":[41],"demands":[42],"DNNs.":[45],"In":[46],"this":[47,117],"paper,":[48],"we":[49],"leverage":[50],"hardware-software":[51],"co-design":[52],"pre-emptive":[54],"implemented":[59],"against":[63],"multiple":[64],"field":[65],"attacks.":[66,225],"A":[67],"unified":[68],"credential":[69,118],"is":[70,100],"generated":[71],"by":[72,80,94,116,140],"projecting":[73],"a":[74,90,104],"subset":[75],"model's":[77],"weights":[78],"selected":[79,111],"physical":[82],"unclonable":[83],"function":[84],"its":[86,95,141],"hosting":[87],"device":[88,126,214],"into":[89],"random":[91],"space":[92],"spanned":[93],"owner":[96,128,217],"ID.":[97],"The":[98,143,199],"model":[99,169,179],"trained":[101],"in":[102],"such":[103],"way":[105],"that":[106,203],"aff1ine":[108],"parameters":[109],"normalization":[112],"blocks":[113],"are":[114],"modulated":[115],"provide":[120],"accurate":[121],"inference":[122,145,210],"valid":[124,216],"ID,":[129,218],"which":[130],"allows":[131],"ownership":[133,167,190],"be":[135],"publicly":[136],"black-box":[138],"verifiable":[139],"users.":[142],"machine":[146],"lockdowns":[147],"automatically":[148],"upon":[149],"any":[150],"attempts":[151],"export,":[153],"modify":[154],"or":[155],"retrain":[156],"model,":[158],"thus":[159],"effectively":[160],"prevent":[161],"many":[162],"forms":[163],"infringement,":[165],"including":[166],"forgery,":[168],"extraction":[170],"replication,":[172],"unauthorized":[173,181],"domain":[174],"adaptation":[175],"reimplementation":[177],"devices.":[182],"We":[183],"have":[184],"evaluated":[185],"these":[186],"attacks":[187],"proof":[191],"with":[192],"two":[193],"four":[197],"datasets.":[198],"experimental":[200],"results":[201],"demonstrated":[202],"protected":[205],"DNNs":[207],"produce":[208],"high":[209],"fidelity":[211],"correct":[213],"significantly":[220],"degraded":[221],"accuracy":[222],"all":[224]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}