{"id":"https://openalex.org/W7130716495","doi":"https://doi.org/10.1109/lca.2026.3666823","title":"FeatureBleed: Inferring Private Enriched Attributes From Sparsity-Optimized AI Accelerators","display_name":"FeatureBleed: Inferring Private Enriched Attributes From Sparsity-Optimized AI Accelerators","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7130716495","doi":"https://doi.org/10.1109/lca.2026.3666823"},"language":null,"primary_location":{"id":"doi:10.1109/lca.2026.3666823","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lca.2026.3666823","pdf_url":null,"source":{"id":"https://openalex.org/S17643076","display_name":"IEEE Computer Architecture Letters","issn_l":"1556-6056","issn":["1556-6056","1556-6064","2473-2575"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Computer Architecture Letters","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071121218","display_name":"Darsh Asher","orcid":null},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]},{"id":"https://openalex.org/I2801313472","display_name":"North Central State College","ror":"https://ror.org/04b6b6f76","country_code":"US","type":"education","lineage":["https://openalex.org/I2801313472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Darsh Asher","raw_affiliation_strings":["ECE Department, NC State University, Raleigh, USA"],"raw_orcid":"https://orcid.org/0009-0007-3325-0224","affiliations":[{"raw_affiliation_string":"ECE Department, NC State University, Raleigh, USA","institution_ids":["https://openalex.org/I137902535","https://openalex.org/I2801313472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126489801","display_name":"Farshad Dizani","orcid":null},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]},{"id":"https://openalex.org/I2801313472","display_name":"North Central State College","ror":"https://ror.org/04b6b6f76","country_code":"US","type":"education","lineage":["https://openalex.org/I2801313472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Farshad Dizani","raw_affiliation_strings":["ECE Department, NC State University, Raleigh, USA"],"raw_orcid":"https://orcid.org/0009-0005-8136-5320","affiliations":[{"raw_affiliation_string":"ECE Department, NC State University, Raleigh, USA","institution_ids":["https://openalex.org/I137902535","https://openalex.org/I2801313472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126466188","display_name":"Joshua Kalyanapu","orcid":null},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]},{"id":"https://openalex.org/I2801313472","display_name":"North Central State College","ror":"https://ror.org/04b6b6f76","country_code":"US","type":"education","lineage":["https://openalex.org/I2801313472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joshua Kalyanapu","raw_affiliation_strings":["ECE Department, NC State University, Raleigh, USA"],"raw_orcid":"https://orcid.org/0009-0002-3186-5069","affiliations":[{"raw_affiliation_string":"ECE Department, NC State University, Raleigh, USA","institution_ids":["https://openalex.org/I137902535","https://openalex.org/I2801313472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126451870","display_name":"Rosario Cammarota","orcid":null},"institutions":[{"id":"https://openalex.org/I4210137750","display_name":"UC Irvine Health","ror":"https://ror.org/03fgher32","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I4210137750"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rosario Cammarota","raw_affiliation_strings":["UC Irvine, CA, USA"],"raw_orcid":"https://orcid.org/0000-0001-5927-8902","affiliations":[{"raw_affiliation_string":"UC Irvine, CA, USA","institution_ids":["https://openalex.org/I4210137750"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123375828","display_name":"Aydin Aysu","orcid":null},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]},{"id":"https://openalex.org/I2801313472","display_name":"North Central State College","ror":"https://ror.org/04b6b6f76","country_code":"US","type":"education","lineage":["https://openalex.org/I2801313472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aydin Aysu","raw_affiliation_strings":["ECE Department, NC State University, Raleigh, USA"],"raw_orcid":"https://orcid.org/0000-0002-5530-8710","affiliations":[{"raw_affiliation_string":"ECE Department, NC State University, Raleigh, USA","institution_ids":["https://openalex.org/I137902535","https://openalex.org/I2801313472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5014384780","display_name":"Samira Mirbagher Ajorpaz","orcid":"https://orcid.org/0009-0008-4997-5980"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]},{"id":"https://openalex.org/I2801313472","display_name":"North Central State College","ror":"https://ror.org/04b6b6f76","country_code":"US","type":"education","lineage":["https://openalex.org/I2801313472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Samira Mirbagher Ajorpaz","raw_affiliation_strings":["ECE Department, NC State University, Raleigh, USA"],"raw_orcid":"https://orcid.org/0009-0008-4997-5980","affiliations":[{"raw_affiliation_string":"ECE Department, NC State University, Raleigh, USA","institution_ids":["https://openalex.org/I137902535","https://openalex.org/I2801313472"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.19833567,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"25","issue":"1","first_page":"77","last_page":"80"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5248000025749207,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5248000025749207,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.1453000009059906,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.133200004696846,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7466999888420105},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6545000076293945},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5637000203132629},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.5331000089645386},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.41290000081062317},{"id":"https://openalex.org/keywords/leakage","display_name":"Leakage (economics)","score":0.41280001401901245},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.36489999294281006},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.3402999937534332}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8628000020980835},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7466999888420105},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6545000076293945},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5637000203132629},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.5331000089645386},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.41290000081062317},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.41280001401901245},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.37209999561309814},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.36489999294281006},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3402999937534332},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3393000066280365},{"id":"https://openalex.org/C46743427","wikidata":"https://www.wikidata.org/wiki/Q1341685","display_name":"Inference engine","level":3,"score":0.33570000529289246},{"id":"https://openalex.org/C2984118289","wikidata":"https://www.wikidata.org/wiki/Q29954","display_name":"Power consumption","level":3,"score":0.3156000077724457},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.313400000333786},{"id":"https://openalex.org/C2780165032","wikidata":"https://www.wikidata.org/wiki/Q16869822","display_name":"Energy consumption","level":2,"score":0.30250000953674316},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.29910001158714294},{"id":"https://openalex.org/C168522837","wikidata":"https://www.wikidata.org/wiki/Q679552","display_name":"Branch predictor","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.27639999985694885},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.27239999175071716},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.26820001006126404},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.26809999346733093},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.2614000141620636},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.26109999418258667},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2578999996185303},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.25769999623298645}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/lca.2026.3666823","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lca.2026.3666823","pdf_url":null,"source":{"id":"https://openalex.org/S17643076","display_name":"IEEE Computer Architecture Letters","issn_l":"1556-6056","issn":["1556-6056","1556-6064","2473-2575"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Computer Architecture Letters","raw_type":"journal-article"},{"id":"pmh:doi:10.48550/arxiv.2602.18304","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2602.18304","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306087","display_name":"Semiconductor Research Corporation","ror":"https://ror.org/047z4n946"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Backend":[0],"enrichmentis":[1],"now":[2],"widelydeployed":[3],"in":[4,164],"sensitive":[5],"domains":[6],"such":[7],"as":[8,161],"product":[9],"recommendation":[10],"pipelines,":[11],"healthcare,":[12],"and":[13,22,59,95,103,117,120,126,137,142,207],"finance,":[14],"where":[15],"models":[16],"are":[17],"trained":[18],"on":[19,80],"confidential":[20],"data":[21,57,140],"retrieve":[23],"private":[24,71],"features":[25,73],"whose":[26],"values":[27],"influence":[28],"inference":[29],"behavior":[30],"while":[31],"remaining":[32],"hidden":[33],"from":[34],"the":[35,41,132,155,159,169,197],"API":[36],"caller.":[37],"This":[38],"paper":[39],"presents":[40],"firsthardware-level":[42],"backend":[43],"retrieval":[44],"data-stealing":[45],"attack,":[46],"showing":[47],"that":[48,131,189],"accelerator":[49],"optimizations":[50],"designed":[51],"for":[52],"performance":[53,205],"can":[54],"directly":[55],"undermine":[56],"confidentiality":[58],"bypass":[60],"state-of-the-art":[61],"privacy":[62],"defenses.":[63],"Our":[64],"attack,FeatureBleed,":[65],"exploitszero-skippingin":[66],"AI":[67],"accelerators":[68],"to":[69,196],"infer":[70],"backend-retrieved":[72],"solely":[74],"through":[75],"end-to-end":[76],"timing,":[77],"without":[78],"relying":[79],"power":[81,210],"analysis,":[82],"DVFS":[83],"manipulation,":[84],"or":[85],"shared-cache":[86],"side":[87],"channels.":[88],"We":[89,107,167,184],"evaluateFeatureBleedon":[90],"three":[91,110,121],"datasets":[92],"spanning":[93],"medical":[94],"non-medical":[96],"domains\u2014Texas-100X":[97],"(clinical":[98],"records),":[99],"OrganAMNIST":[100],"(medical":[101],"imaging),":[102],"Census-19":[104],"(socioeconomic":[105],"data).":[106],"further":[108],"evaluateFeatureBleedacross":[109],"hardware":[111],"backends":[112],"(Intel":[113],"AVX,":[114],"Intel":[115,175],"AMX,":[116],"NVIDIA":[118],"A100)":[119],"model":[122],"architectures":[123],"(DNNs,":[124],"CNNs,":[125],"hybrid":[127],"CNN\u2013MLP":[128],"pipelines),":[129],"demonstrating":[130],"leakage":[133,160,192],"generalizes":[134],"across":[135],"CPU":[136],"GPU":[138],"accelerators,":[139],"modalities,":[141],"application":[143],"domains,":[144],"with":[145,203],"an":[146],"adversarial":[147],"advantage":[148],"of":[149,158],"up":[150,180],"to98.87pp.":[151],"Finally,":[152],"we":[153],"identify":[154],"root":[156],"cause":[157],"sparsity-driven":[162],"zero-skipping":[163,173],"modern":[165],"hardware.":[166],"quantify":[168],"privacy\u2013performance\u2013power":[170],"trade-off:":[171],"disabling":[172],"increases":[174],"AMX's":[176],"per-operation":[177],"energy":[178],"by":[179,193],"to25%and":[181],"incurs100%performance":[182],"overhead.":[183],"propose":[185],"a":[186],"padding-based":[187],"defense":[188],"masks":[190],"timing":[191],"equalizing":[194],"responses":[195],"worst-case":[198],"execution":[199],"time,":[200],"achieving":[201],"protection":[202],"only7.24%average":[204],"overhead":[206],"no":[208],"additional":[209],"cost.":[211]},"counts_by_year":[],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2026-02-21T00:00:00"}