{"id":"https://openalex.org/W4285174672","doi":"https://doi.org/10.1109/tcsvt.2022.3184644","title":"Ownership Verification of DNN Architectures via Hardware Cache Side Channels","display_name":"Ownership Verification of DNN Architectures via Hardware Cache Side Channels","publication_year":2022,"publication_date":"2022-06-21","ids":{"openalex":"https://openalex.org/W4285174672","doi":"https://doi.org/10.1109/tcsvt.2022.3184644"},"language":"en","primary_location":{"id":"doi:10.1109/tcsvt.2022.3184644","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcsvt.2022.3184644","pdf_url":null,"source":{"id":"https://openalex.org/S115173108","display_name":"IEEE Transactions on Circuits and Systems for Video Technology","issn_l":"1051-8215","issn":["1051-8215","1558-2205"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Circuits and Systems for Video Technology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://dr.ntu.edu.sg/bitstream/10356/159773/2/main.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055011581","display_name":"Xiaoxuan Lou","orcid":"https://orcid.org/0000-0002-9510-1300"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Xiaoxuan Lou","raw_affiliation_strings":["School of Computer Science and Engineering, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-9510-1300","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073264981","display_name":"Shangwei Guo","orcid":"https://orcid.org/0000-0002-6443-5308"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shangwei Guo","raw_affiliation_strings":["College of Computer Science, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-6443-5308","affiliations":[{"raw_affiliation_string":"College of Computer Science, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100758093","display_name":"Jiwei Li","orcid":"https://orcid.org/0000-0002-1903-0731"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiwei Li","raw_affiliation_strings":["Shannon.AI, Beijing, China","Department of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shannon.AI, Beijing, China","institution_ids":[]},{"raw_affiliation_string":"Department of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101591101","display_name":"Tianwei Zhang","orcid":"https://orcid.org/0000-0001-6595-6650"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Tianwei Zhang","raw_affiliation_strings":["School of Computer Science and Engineering, Nanyang Technological University, Singapore"],"raw_orcid":"https://orcid.org/0000-0001-6595-6650","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.2203,"has_fulltext":true,"cited_by_count":18,"citation_normalized_percentile":{"value":0.89449468,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"32","issue":"11","first_page":"8078","last_page":"8093"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.840245246887207},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7098774313926697},{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.7004155516624451},{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.5058907866477966},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4681088626384735},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.46539127826690674},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.46333399415016174},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.4491071105003357},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.4421711564064026},{"id":"https://openalex.org/keywords/fidelity","display_name":"Fidelity","score":0.44058725237846375},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.41350698471069336},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.4102241098880768},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.33239632844924927},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.3024902939796448},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2042175829410553},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1286364495754242}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.840245246887207},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7098774313926697},{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.7004155516624451},{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.5058907866477966},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4681088626384735},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46539127826690674},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.46333399415016174},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.4491071105003357},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.4421711564064026},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.44058725237846375},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.41350698471069336},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.4102241098880768},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33239632844924927},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.3024902939796448},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2042175829410553},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1286364495754242},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tcsvt.2022.3184644","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcsvt.2022.3184644","pdf_url":null,"source":{"id":"https://openalex.org/S115173108","display_name":"IEEE Transactions on Circuits and Systems for Video Technology","issn_l":"1051-8215","issn":["1051-8215","1558-2205"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Circuits and Systems for Video Technology","raw_type":"journal-article"},{"id":"pmh:oai:dr.ntu.edu.sg:10356/159773","is_oa":true,"landing_page_url":"https://hdl.handle.net/10356/159773","pdf_url":"https://dr.ntu.edu.sg/bitstream/10356/159773/2/main.pdf","source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"}],"best_oa_location":{"id":"pmh:oai:dr.ntu.edu.sg:10356/159773","is_oa":true,"landing_page_url":"https://hdl.handle.net/10356/159773","pdf_url":"https://dr.ntu.edu.sg/bitstream/10356/159773/2/main.pdf","source":{"id":"https://openalex.org/S4306402609","display_name":"DR-NTU (Nanyang Technological University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I172675005","host_organization_name":"Nanyang Technological University","host_organization_lineage":["https://openalex.org/I172675005"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Journal Article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/11","score":0.5099999904632568,"display_name":"Sustainable cities and communities"}],"awards":[{"id":"https://openalex.org/G256199226","display_name":null,"funder_award_id":"AcRF Tier 2 MOET2EP20121-0006","funder_id":"https://openalex.org/F4320320751","funder_display_name":"Ministry of Education - Singapore"},{"id":"https://openalex.org/G3550020321","display_name":null,"funder_award_id":"U21A20463","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5928885788","display_name":null,"funder_award_id":"NRF2018NCR-NCR009-0001","funder_id":"https://openalex.org/F4320320709","funder_display_name":"National Research Foundation Singapore"},{"id":"https://openalex.org/G7041478377","display_name":null,"funder_award_id":"62102052","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8326818770","display_name":null,"funder_award_id":"AcRF Tier 1 RS02/19","funder_id":"https://openalex.org/F4320320751","funder_display_name":"Ministry of Education - Singapore"},{"id":"https://openalex.org/G891405277","display_name":null,"funder_award_id":"cstc2021jcyj-msxmX0744","funder_id":"https://openalex.org/F4320323172","funder_display_name":"Natural Science Foundation of Chongqing"}],"funders":[{"id":"https://openalex.org/F4320320709","display_name":"National Research Foundation Singapore","ror":"https://ror.org/03cpyc314"},{"id":"https://openalex.org/F4320320751","display_name":"Ministry of Education - Singapore","ror":"https://ror.org/01kcva023"},{"id":"https://openalex.org/F4320320766","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320323172","display_name":"Natural Science Foundation of Chongqing","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4285174672.pdf","grobid_xml":"https://content.openalex.org/works/W4285174672.grobid-xml"},"referenced_works_count":84,"referenced_works":["https://openalex.org/W1821462560","https://openalex.org/W1934458198","https://openalex.org/W2036329595","https://openalex.org/W2073061372","https://openalex.org/W2115924904","https://openalex.org/W2134797427","https://openalex.org/W2194775991","https://openalex.org/W2319920447","https://openalex.org/W2553303224","https://openalex.org/W2579318729","https://openalex.org/W2594560662","https://openalex.org/W2606774910","https://openalex.org/W2618530766","https://openalex.org/W2620979425","https://openalex.org/W2748513770","https://openalex.org/W2768064608","https://openalex.org/W2806082141","https://openalex.org/W2895073576","https://openalex.org/W2896457183","https://openalex.org/W2906869444","https://openalex.org/W2911594609","https://openalex.org/W2935349488","https://openalex.org/W2944990321","https://openalex.org/W2946547492","https://openalex.org/W2951104886","https://openalex.org/W2960010704","https://openalex.org/W2962726564","https://openalex.org/W2963778169","https://openalex.org/W2963821229","https://openalex.org/W2964081807","https://openalex.org/W2964128659","https://openalex.org/W2965658867","https://openalex.org/W2985954225","https://openalex.org/W2990980946","https://openalex.org/W2995955028","https://openalex.org/W2997717738","https://openalex.org/W2999044305","https://openalex.org/W2999270366","https://openalex.org/W3042950035","https://openalex.org/W3102733833","https://openalex.org/W3102836279","https://openalex.org/W3107893198","https://openalex.org/W3115684750","https://openalex.org/W3128902306","https://openalex.org/W3133940464","https://openalex.org/W3134175397","https://openalex.org/W3135132438","https://openalex.org/W3135872251","https://openalex.org/W3156793535","https://openalex.org/W3158240034","https://openalex.org/W3192504716","https://openalex.org/W3195408738","https://openalex.org/W3203915045","https://openalex.org/W4205520414","https://openalex.org/W4246001895","https://openalex.org/W4288057713","https://openalex.org/W4288322434","https://openalex.org/W4292779060","https://openalex.org/W4300687381","https://openalex.org/W4300687870","https://openalex.org/W6628261430","https://openalex.org/W6679909955","https://openalex.org/W6700264148","https://openalex.org/W6729956949","https://openalex.org/W6734345789","https://openalex.org/W6743495212","https://openalex.org/W6745614327","https://openalex.org/W6747838042","https://openalex.org/W6748057086","https://openalex.org/W6752515464","https://openalex.org/W6753303928","https://openalex.org/W6753344092","https://openalex.org/W6753937820","https://openalex.org/W6755207826","https://openalex.org/W6755424845","https://openalex.org/W6758096801","https://openalex.org/W6764249721","https://openalex.org/W6765297142","https://openalex.org/W6766787143","https://openalex.org/W6771859737","https://openalex.org/W6772109348","https://openalex.org/W6776539187","https://openalex.org/W6778883912","https://openalex.org/W6798095466"],"related_works":["https://openalex.org/W2361629745","https://openalex.org/W2107922825","https://openalex.org/W3094285444","https://openalex.org/W1568204688","https://openalex.org/W2381262728","https://openalex.org/W2111592878","https://openalex.org/W1846726187","https://openalex.org/W1593964766","https://openalex.org/W2387614453","https://openalex.org/W1601072116"],"abstract_inverted_index":{"Deep":[0],"Neural":[1,110],"Networks":[2],"(DNN)":[3],"are":[4,119],"gaining":[5],"higher":[6],"commercial":[7],"values":[8],"in":[9],"computer":[10],"vision":[11],"applications,":[12],"e.g.,":[13],"image":[14,153],"classification,":[15],"video":[16],"analytics,":[17],"etc.":[18],"This":[19],"calls":[20],"for":[21,93,152],"urgent":[22],"demands":[23],"of":[24,30,47],"the":[25,44,56,61,80,86,102,124,157,167],"intellectual":[26],"property":[27],"(IP)":[28],"protection":[29],"DNN":[31,48],"models.":[32],"In":[33,82],"this":[34],"paper,":[35],"we":[36,84],"present":[37],"a":[38],"novel":[39],"watermarking":[40],"scheme":[41,162],"to":[42,70,76,98,114,122],"achieve":[43],"ownership":[45],"verification":[46],"architectures.":[49,103],"Existing":[50],"works":[51],"all":[52],"embedded":[53],"watermarks":[54,100,132],"into":[55,101],"model":[57,87,94,129,138,168,176],"parameters":[58],"while":[59,126],"treating":[60],"architecture":[62],"as":[63,89],"public":[64],"property.":[65],"These":[66],"solutions":[67],"were":[68],"proven":[69],"be":[71,134],"vulnerable":[72],"by":[73],"an":[74,90],"adversary":[75],"detect":[77],"or":[78],"remove":[79],"watermarks.":[81],"contrast,":[83],"claim":[85],"architectures":[88],"important":[91],"IP":[92],"owners,":[95],"and":[96,156,170,178],"propose":[97],"implant":[99],"We":[104,144],"design":[105],"new":[106],"algorithms":[107],"based":[108],"on":[109,148,166],"Architecture":[111],"Search":[112],"(NAS)":[113],"generate":[115],"watermarked":[116,149],"architectures,":[117],"which":[118],"unique":[120],"enough":[121],"represent":[123],"ownership,":[125],"maintaining":[127],"high":[128,142],"usability.":[130],"Such":[131],"can":[133],"extracted":[135],"via":[136],"side-channel-based":[137],"extraction":[139],"techniques":[140],"with":[141],"fidelity.":[143],"conduct":[145],"comprehensive":[146],"experiments":[147],"CNN":[150],"models":[151],"classification":[154],"tasks":[155],"experimental":[158],"results":[159],"show":[160],"our":[161],"has":[163],"negligible":[164],"impact":[165],"performance,":[169],"exhibits":[171],"strong":[172],"robustness":[173],"against":[174],"various":[175],"transformations":[177],"adaptive":[179],"attacks.":[180]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":1}],"updated_date":"2026-06-20T22:02:38.213706","created_date":"2025-10-10T00:00:00"}