{"id":"https://openalex.org/W3088168038","doi":"https://doi.org/10.1109/tcad.2020.3013077","title":"Sparsity Turns Adversarial: Energy and Latency Attacks on Deep Neural Networks","display_name":"Sparsity Turns Adversarial: Energy and Latency Attacks on Deep Neural Networks","publication_year":2020,"publication_date":"2020-10-02","ids":{"openalex":"https://openalex.org/W3088168038","doi":"https://doi.org/10.1109/tcad.2020.3013077","mag":"3088168038"},"language":"en","primary_location":{"id":"doi:10.1109/tcad.2020.3013077","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcad.2020.3013077","pdf_url":null,"source":{"id":"https://openalex.org/S100835903","display_name":"IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems","issn_l":"0278-0070","issn":["0278-0070","1937-4151"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2006.08020","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5075611664","display_name":"Sarada Krithivasan","orcid":"https://orcid.org/0000-0002-2958-1377"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sarada Krithivasan","raw_affiliation_strings":["School of Electrical and Computer Engineering, Purdue University, West Lafayette, IN, USA","School of Electrical and Computer Engineering, Purdue University, West lafayette, IN, USA"],"raw_orcid":"https://orcid.org/0000-0002-2958-1377","affiliations":[{"raw_affiliation_string":"School of Electrical and Computer Engineering, Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]},{"raw_affiliation_string":"School of Electrical and Computer Engineering, Purdue University, West lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021284824","display_name":"Sanchari Sen","orcid":"https://orcid.org/0000-0003-0080-2882"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sanchari Sen","raw_affiliation_strings":["School of Electrical and Computer Engineering, Purdue University, West Lafayette, IN, USA","School of Electrical and Computer Engineering, Purdue University, West lafayette, IN, USA"],"raw_orcid":"https://orcid.org/0000-0003-0080-2882","affiliations":[{"raw_affiliation_string":"School of Electrical and Computer Engineering, Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]},{"raw_affiliation_string":"School of Electrical and Computer Engineering, Purdue University, West lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065766721","display_name":"Anand Raghunathan","orcid":"https://orcid.org/0000-0002-4624-564X"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anand Raghunathan","raw_affiliation_strings":["School of Electrical and Computer Engineering, Purdue University, West Lafayette, IN, USA","School of Electrical and Computer Engineering, Purdue University, West lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical and Computer Engineering, Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]},{"raw_affiliation_string":"School of Electrical and Computer Engineering, Purdue University, West lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I219193219"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.11947539,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"39","issue":"11","first_page":"4129","last_page":"4141"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9326000213623047,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9103000164031982,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8090241551399231},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.6290044784545898},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5862262845039368},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5813689827919006},{"id":"https://openalex.org/keywords/quantization","display_name":"Quantization (signal processing)","score":0.5348796844482422},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.5044881105422974},{"id":"https://openalex.org/keywords/thresholding","display_name":"Thresholding","score":0.46512553095817566},{"id":"https://openalex.org/keywords/gradient-descent","display_name":"Gradient descent","score":0.4617931842803955},{"id":"https://openalex.org/keywords/energy-consumption","display_name":"Energy consumption","score":0.4526588022708893},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.4460658133029938},{"id":"https://openalex.org/keywords/energy","display_name":"Energy (signal processing)","score":0.4410543441772461},{"id":"https://openalex.org/keywords/efficient-energy-use","display_name":"Efficient energy use","score":0.4366886615753174},{"id":"https://openalex.org/keywords/activation-function","display_name":"Activation function","score":0.42841601371765137},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4254380762577057},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.41920024156570435},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.3732123374938965},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3502011001110077},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.2566649317741394},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.24608245491981506},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.11281591653823853},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.08123162388801575}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8090241551399231},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.6290044784545898},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5862262845039368},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5813689827919006},{"id":"https://openalex.org/C28855332","wikidata":"https://www.wikidata.org/wiki/Q198099","display_name":"Quantization (signal processing)","level":2,"score":0.5348796844482422},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.5044881105422974},{"id":"https://openalex.org/C191178318","wikidata":"https://www.wikidata.org/wiki/Q2256906","display_name":"Thresholding","level":3,"score":0.46512553095817566},{"id":"https://openalex.org/C153258448","wikidata":"https://www.wikidata.org/wiki/Q1199743","display_name":"Gradient descent","level":3,"score":0.4617931842803955},{"id":"https://openalex.org/C2780165032","wikidata":"https://www.wikidata.org/wiki/Q16869822","display_name":"Energy consumption","level":2,"score":0.4526588022708893},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.4460658133029938},{"id":"https://openalex.org/C186370098","wikidata":"https://www.wikidata.org/wiki/Q442787","display_name":"Energy (signal processing)","level":2,"score":0.4410543441772461},{"id":"https://openalex.org/C2742236","wikidata":"https://www.wikidata.org/wiki/Q924713","display_name":"Efficient energy use","level":2,"score":0.4366886615753174},{"id":"https://openalex.org/C38365724","wikidata":"https://www.wikidata.org/wiki/Q4677469","display_name":"Activation function","level":3,"score":0.42841601371765137},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4254380762577057},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41920024156570435},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.3732123374938965},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3502011001110077},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.2566649317741394},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.24608245491981506},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.11281591653823853},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.08123162388801575},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/tcad.2020.3013077","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcad.2020.3013077","pdf_url":null,"source":{"id":"https://openalex.org/S100835903","display_name":"IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems","issn_l":"0278-0070","issn":["0278-0070","1937-4151"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2006.08020","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2006.08020","pdf_url":"https://arxiv.org/pdf/2006.08020","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:3088168038","is_oa":true,"landing_page_url":"http://export.arxiv.org/pdf/2006.08020","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2006.08020","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2006.08020","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2006.08020","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2006.08020","pdf_url":"https://arxiv.org/pdf/2006.08020","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Affordable and clean energy","score":0.8999999761581421,"id":"https://metadata.un.org/sdg/7"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306087","display_name":"Semiconductor Research Corporation","ror":"https://ror.org/047z4n946"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W3088168038.pdf"},"referenced_works_count":21,"referenced_works":["https://openalex.org/W2108598243","https://openalex.org/W2145287260","https://openalex.org/W2160815625","https://openalex.org/W2516141709","https://openalex.org/W2945146780","https://openalex.org/W2963857521","https://openalex.org/W2964080840","https://openalex.org/W2971626200","https://openalex.org/W2979310060","https://openalex.org/W2979439447","https://openalex.org/W2980186997","https://openalex.org/W2990887689","https://openalex.org/W4236868170","https://openalex.org/W4242053016","https://openalex.org/W6604254268","https://openalex.org/W6640425456","https://openalex.org/W6677580257","https://openalex.org/W6677995690","https://openalex.org/W6739868092","https://openalex.org/W6771326840","https://openalex.org/W6787972765"],"related_works":["https://openalex.org/W3035479291","https://openalex.org/W3109936213","https://openalex.org/W3013954922","https://openalex.org/W3004077551","https://openalex.org/W3030040666","https://openalex.org/W3047492485","https://openalex.org/W2915576822","https://openalex.org/W3203663802","https://openalex.org/W3101882350","https://openalex.org/W3154935500","https://openalex.org/W2773246606","https://openalex.org/W3170672068","https://openalex.org/W2618186003","https://openalex.org/W2985390828","https://openalex.org/W3099756208","https://openalex.org/W3117928012","https://openalex.org/W2884277299","https://openalex.org/W3177045521","https://openalex.org/W2906518362","https://openalex.org/W2950147665"],"abstract_inverted_index":{"Adversarial":[0],"attacks":[1,29,32,139,197],"have":[2],"exposed":[3],"serious":[4],"vulnerabilities":[5],"in":[6,24,79,86,100,123,219,223,227,274],"deep":[7],"neural":[8],"networks":[9],"(DNNs),":[10],"causing":[11],"misclassifications":[12],"through":[13],"human-imperceptible":[14],"perturbations":[15],"to":[16,35,71,96,133,265],"DNN":[17,98,116,214],"inputs.":[18],"We":[19,128,187],"explore":[20],"a":[21,49,66,93,130,175,212],"new":[22,54,276],"direction":[23,277],"the":[25,37,75,108,147,164,170,180,216,234,242,260,269,279],"field":[26,280],"of":[27,41,52,77,114,163,194,221,236,281],"adversarial":[28,61,135,195,282],"by":[30,140,209],"suggesting":[31],"that":[33,145,169,179,204,259],"aim":[34],"degrade":[36],"energy":[38,112],"or":[39],"latency":[40,124,224],"DNNs":[42,201],"rather":[43],"than":[44],"their":[45,121],"classification":[46,185],"accuracy.":[47,186],"As":[48],"specific":[50],"embodiment":[51],"this":[53,153,275],"threat":[55],"vector,":[56],"we":[57,166,232,246],"propose":[58,129],"and":[59,88,111,125,151,178,191,202,225,239,254,257],"demonstrate":[60,203,258],"sparsity":[62,73,85,138,150,196,208],"attacks,":[63],"which":[64],"modify":[65],"DNN's":[67],"inputs":[68,136],"so":[69],"as":[70,92,251],"reduce":[72],"(or":[74],"incidence":[76],"zeros)":[78],"its":[80],"internal":[81],"activation":[82,149,207,252],"values.":[83],"Exploiting":[84],"hardware":[87],"software":[89],"has":[90],"emerged":[91],"popular":[94],"approach":[95],"improve":[97],"efficiency":[99],"resource-constrained":[101],"systems.":[102],"The":[103],"proposed":[104,261],"attack,":[105,165],"therefore,":[106],"increases":[107],"execution":[109],"time":[110],"consumption":[113],"sparsity-optimized":[115,213],"implementations,":[117],"raising":[118],"concern":[119],"over":[120],"deployment":[122],"energy-critical":[126],"applications.":[127],"systematic":[131],"methodology":[132],"generate":[134],"for":[137,271],"formulating":[141],"an":[142],"objective":[143],"function":[144,154],"quantifies":[146],"network's":[148],"minimizing":[152],"using":[155],"iterative":[156],"gradient-descent":[157],"techniques.":[158],"To":[159],"prevent":[160],"easy":[161],"detection":[162],"further":[167,272],"ensure":[168],"perturbation":[171,181],"magnitude":[172],"is":[173,263],"within":[174,278],"specified":[176],"constraint":[177],"does":[182],"not":[183],"affect":[184],"launch":[188],"both":[189],"white-box":[190],"black-box":[192],"versions":[193],"on":[198,241],"image":[199],"recognition":[200],"they":[205],"decrease":[206],"1.16\u00d7-1.82\u00d7.":[210],"On":[211],"accelerator,":[215],"attack":[217,262],"results":[218],"degradations":[220],"1.12\u00d7-1.59\u00d7":[222],"1.18\u00d7-1.99\u00d7":[226],"energy-delay":[228],"product":[229],"(EDP).":[230],"Additionally,":[231],"analyze":[233],"impact":[235],"various":[237],"hyperparameters":[238],"constraints":[240],"attack's":[243],"efficacy.":[244],"Finally,":[245],"evaluate":[247],"defense":[248],"techniques,":[249],"such":[250],"thresholding":[253],"input":[255],"quantization":[256],"able":[264],"withstand":[266],"them,":[267],"highlighting":[268],"need":[270],"efforts":[273],"machine":[283],"learning.":[284]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}