{"id":"https://openalex.org/W4403674897","doi":"https://doi.org/10.1109/jetcas.2024.3485133","title":"Stealing the Invisible: Unveiling Pre-Trained CNN Models through Adversarial Examples and Timing Side-Channels","display_name":"Stealing the Invisible: Unveiling Pre-Trained CNN Models through Adversarial Examples and Timing Side-Channels","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4403674897","doi":"https://doi.org/10.1109/jetcas.2024.3485133"},"language":"en","primary_location":{"id":"doi:10.1109/jetcas.2024.3485133","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jetcas.2024.3485133","pdf_url":null,"source":{"id":"https://openalex.org/S142323794","display_name":"IEEE Journal on Emerging and Selected Topics in Circuits and Systems","issn_l":"2156-3357","issn":["2156-3357","2156-3365"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Journal on Emerging and Selected Topics in Circuits and Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035190620","display_name":"Shubhi Shukla","orcid":"https://orcid.org/0000-0003-0452-885X"},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Shubhi Shukla","raw_affiliation_strings":["Centre for Computational Data Sciences, Indian Institute of Technology Kharagpur, India"],"raw_orcid":"https://orcid.org/0000-0003-0452-885X","affiliations":[{"raw_affiliation_string":"Centre for Computational Data Sciences, Indian Institute of Technology Kharagpur, India","institution_ids":["https://openalex.org/I145894827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053280523","display_name":"Manaar Alam","orcid":"https://orcid.org/0000-0002-3338-2944"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Manaar Alam","raw_affiliation_strings":["New York University Abu Dhabi, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-3338-2944","affiliations":[{"raw_affiliation_string":"New York University Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032809289","display_name":"Pabitra Mitra","orcid":"https://orcid.org/0000-0002-1908-9813"},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Pabitra Mitra","raw_affiliation_strings":["Computer Science and Engineering Department, Indian Institute of Technology Kharagpur, India"],"raw_orcid":"https://orcid.org/0000-0002-1908-9813","affiliations":[{"raw_affiliation_string":"Computer Science and Engineering Department, Indian Institute of Technology Kharagpur, India","institution_ids":["https://openalex.org/I145894827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078971402","display_name":"Debdeep Mukhopadhyay","orcid":"https://orcid.org/0000-0002-6499-8346"},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Debdeep Mukhopadhyay","raw_affiliation_strings":["Computer Science and Engineering Department, Indian Institute of Technology Kharagpur, India"],"raw_orcid":"https://orcid.org/0000-0002-6499-8346","affiliations":[{"raw_affiliation_string":"Computer Science and Engineering Department, Indian Institute of Technology Kharagpur, India","institution_ids":["https://openalex.org/I145894827"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4802,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.71958536,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9879999756813049,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9689000248908997,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7566742897033691},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.6138335466384888},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5492694973945618},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4874742031097412},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.33662936091423035},{"id":"https://openalex.org/keywords/speech-recognition","display_name":"Speech recognition","score":0.32227808237075806},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.24772733449935913},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.07981935143470764}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7566742897033691},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.6138335466384888},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5492694973945618},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4874742031097412},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.33662936091423035},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.32227808237075806},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.24772733449935913},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.07981935143470764}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jetcas.2024.3485133","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jetcas.2024.3485133","pdf_url":null,"source":{"id":"https://openalex.org/S142323794","display_name":"IEEE Journal on Emerging and Selected Topics in Circuits and Systems","issn_l":"2156-3357","issn":["2156-3357","2156-3365"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Journal on Emerging and Selected Topics in Circuits and Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W2183341477","https://openalex.org/W2194775991","https://openalex.org/W2294710185","https://openalex.org/W2549139847","https://openalex.org/W2603766943","https://openalex.org/W2808195004","https://openalex.org/W2883780447","https://openalex.org/W2891810898","https://openalex.org/W2963163009","https://openalex.org/W2963303354","https://openalex.org/W2963446712","https://openalex.org/W2963918968","https://openalex.org/W2964137095","https://openalex.org/W2978872500","https://openalex.org/W2994624247","https://openalex.org/W2997146418","https://openalex.org/W3046853140","https://openalex.org/W3082305010","https://openalex.org/W3087685156","https://openalex.org/W3091214985","https://openalex.org/W3102836279","https://openalex.org/W3114482311","https://openalex.org/W3134770507","https://openalex.org/W3148576306","https://openalex.org/W3174136778","https://openalex.org/W3186456562","https://openalex.org/W3206880386","https://openalex.org/W3213793813","https://openalex.org/W4221155126","https://openalex.org/W4246001895","https://openalex.org/W4246193833","https://openalex.org/W4281396648","https://openalex.org/W4283390025","https://openalex.org/W4292993844","https://openalex.org/W4363671730","https://openalex.org/W4367191550","https://openalex.org/W4367368092","https://openalex.org/W4394670654","https://openalex.org/W4399930915","https://openalex.org/W6637373629","https://openalex.org/W6684191040","https://openalex.org/W6731927902","https://openalex.org/W6753937820","https://openalex.org/W6755007867","https://openalex.org/W6755424845","https://openalex.org/W6758096801","https://openalex.org/W6766787143","https://openalex.org/W6766978945","https://openalex.org/W6768817161","https://openalex.org/W6770088130","https://openalex.org/W6772047124","https://openalex.org/W6772115015","https://openalex.org/W6776644305","https://openalex.org/W6777991474","https://openalex.org/W6779248606","https://openalex.org/W6791286004","https://openalex.org/W6798190327","https://openalex.org/W6803677459","https://openalex.org/W6850417199"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119","https://openalex.org/W2033914206","https://openalex.org/W2042327336"],"abstract_inverted_index":{"Machine":[0,44],"learning,":[1,26],"with":[2,108],"its":[3],"myriad":[4],"applications,":[5],"has":[6],"become":[7],"an":[8],"integral":[9],"component":[10],"of":[11,24,88,121,143,166,181,193,207],"numerous":[12],"AI":[13],"systems.":[14],"A":[15],"common":[16],"practice":[17],"in":[18,55,106,119,134],"this":[19,70],"domain":[20],"is":[21,37,59,112,217],"the":[22,35,81,85,99,102,164,173,179,211],"use":[23,52],"transfer":[25],"where":[27],"a":[28,47,74,95,204,218],"pre-trained":[29,53,191],"model\u2019s":[30],"architecture,":[31],"readily":[32],"available":[33],"to":[34,39,61,97,114,149,171,222],"public,":[36],"fine-tuned":[38],"suit":[40],"specific":[41],"tasks.":[42],"As":[43],"Learning":[45],"as":[46,94,124,126],"Service":[48],"(MLaaS)":[49],"platforms":[50],"increasingly":[51],"models":[54,148,192],"their":[56,67],"backends,":[57],"it":[58,139],"crucial":[60],"safeguard":[62],"these":[63],"architectures":[64,198],"and":[65,138,157,196,202],"understand":[66],"vulnerabilities.":[68],"In":[69],"work,":[71],"we":[72],"presentArchWhisperer,":[73],"model":[75,109,168],"fingerprinting":[76],"attack":[77,118,122],"approach":[78],"based":[79],"on":[80],"novel":[82],"observation":[83],"that":[84],"classification":[86],"patterns":[87],"adversarial":[89,103,144,175],"images":[90,145],"can":[91],"be":[92],"used":[93,113],"means":[96],"steal":[98],"models.":[100],"Furthermore,":[101],"image":[104],"classifications":[105],"conjunction":[107],"inference":[110,169],"times":[111,170],"further":[115],"enhance":[116],"our":[117,187],"terms":[120],"effectiveness":[123],"well":[125],"query":[127,212],"budget.ArchWhispereris":[128],"designed":[129],"for":[130],"typical":[131],"user-level":[132],"access":[133],"remote":[135,167],"MLaaS":[136],"environments":[137],"exploits":[140],"varying":[141],"misclassifications":[142],"across":[146],"different":[147,194],"fingerprint":[150],"several":[151],"renowned":[152],"Convolutional":[153],"Neural":[154],"Network":[155],"(CNN)":[156],"Vision":[158],"Transformer":[159],"(ViT)":[160],"architectures.":[161],"We":[162,184],"utilize":[163],"profiling":[165],"reduce":[172],"necessary":[174],"images,":[176],"subsequently":[177],"decreasing":[178],"number":[180],"queries":[182],"required.":[183],"have":[185],"presented":[186],"results":[188],"over":[189],"27":[190],"CNN":[195],"ViT":[197],"using":[199],"CIFAR-10":[200],"dataset":[201],"demonstrate":[203],"high":[205],"accuracy":[206],"88.8%":[208],"while":[209],"keeping":[210],"budget":[213],"under":[214],"20.":[215],"This":[216],"marked":[219],"improvement":[220],"compared":[221],"state-of-the-art":[223],"works.":[224]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}