{"id":"https://openalex.org/W4403826983","doi":"https://doi.org/10.1109/tnnls.2024.3482364","title":"DSE-Based Hardware Trojan Attack for Neural Network Accelerators on FPGAs","display_name":"DSE-Based Hardware Trojan Attack for Neural Network Accelerators on FPGAs","publication_year":2024,"publication_date":"2024-10-28","ids":{"openalex":"https://openalex.org/W4403826983","doi":"https://doi.org/10.1109/tnnls.2024.3482364","pmid":"https://pubmed.ncbi.nlm.nih.gov/39466864"},"language":"en","primary_location":{"id":"doi:10.1109/tnnls.2024.3482364","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2024.3482364","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Chao Guo","orcid":"https://orcid.org/0009-0006-7340-039X"},"institutions":[{"id":"https://openalex.org/I150744194","display_name":"Waseda University","ror":"https://ror.org/00ntfnx83","country_code":"JP","type":"education","lineage":["https://openalex.org/I150744194"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Chao Guo","raw_affiliation_strings":["Department of Electronic and Physical Systems, Faculty of Fundamental Science and Engineering, Waseda University, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0009-0006-7340-039X","affiliations":[{"raw_affiliation_string":"Department of Electronic and Physical Systems, Faculty of Fundamental Science and Engineering, Waseda University, Tokyo, Japan","institution_ids":["https://openalex.org/I150744194"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061982025","display_name":"Masao Yanagisawa","orcid":"https://orcid.org/0000-0002-5168-3214"},"institutions":[{"id":"https://openalex.org/I150744194","display_name":"Waseda University","ror":"https://ror.org/00ntfnx83","country_code":"JP","type":"education","lineage":["https://openalex.org/I150744194"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Masao Yanagisawa","raw_affiliation_strings":["Department of Electronic and Physical Systems, Faculty of Fundamental Science and Engineering, Waseda University, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0002-5168-3214","affiliations":[{"raw_affiliation_string":"Department of Electronic and Physical Systems, Faculty of Fundamental Science and Engineering, Waseda University, Tokyo, Japan","institution_ids":["https://openalex.org/I150744194"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056061175","display_name":"Youhua Shi","orcid":"https://orcid.org/0000-0002-1473-9776"},"institutions":[{"id":"https://openalex.org/I150744194","display_name":"Waseda University","ror":"https://ror.org/00ntfnx83","country_code":"JP","type":"education","lineage":["https://openalex.org/I150744194"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Youhua Shi","raw_affiliation_strings":["Department of Electronic and Physical Systems, Faculty of Fundamental Science and Engineering, Waseda University, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0002-1473-9776","affiliations":[{"raw_affiliation_string":"Department of Electronic and Physical Systems, Faculty of Fundamental Science and Engineering, Waseda University, Tokyo, Japan","institution_ids":["https://openalex.org/I150744194"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I150744194"],"apc_list":null,"apc_paid":null,"fwci":1.9752,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.88144125,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"36","issue":"7","first_page":"13036","last_page":"13050"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9868999719619751,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14117","display_name":"Integrated Circuits and Semiconductor Failure Analysis","score":0.9861999750137329,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.8114110231399536},{"id":"https://openalex.org/keywords/field-programmable-gate-array","display_name":"Field-programmable gate array","score":0.7987338304519653},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5839799642562866},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5737103223800659},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5551069378852844},{"id":"https://openalex.org/keywords/computer-architecture","display_name":"Computer architecture","score":0.3904259204864502},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.35900527238845825},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.18622669577598572},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.15958988666534424}],"concepts":[{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.8114110231399536},{"id":"https://openalex.org/C42935608","wikidata":"https://www.wikidata.org/wiki/Q190411","display_name":"Field-programmable gate array","level":2,"score":0.7987338304519653},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5839799642562866},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5737103223800659},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5551069378852844},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.3904259204864502},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.35900527238845825},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18622669577598572},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.15958988666534424}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tnnls.2024.3482364","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnnls.2024.3482364","pdf_url":null,"source":{"id":"https://openalex.org/S4210175523","display_name":"IEEE Transactions on Neural Networks and Learning Systems","issn_l":"2162-237X","issn":["2162-237X","2162-2388"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Neural Networks and Learning Systems","raw_type":"journal-article"},{"id":"pmid:39466864","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/39466864","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on neural networks and learning systems","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6100000143051147,"display_name":"Affordable and clean energy","id":"https://metadata.un.org/sdg/7"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W1998917233","https://openalex.org/W2037227137","https://openalex.org/W2108598243","https://openalex.org/W2112796928","https://openalex.org/W2155893237","https://openalex.org/W2161998562","https://openalex.org/W2565125333","https://openalex.org/W2798273231","https://openalex.org/W2890837522","https://openalex.org/W2899915146","https://openalex.org/W2946801000","https://openalex.org/W2962939738","https://openalex.org/W2963037989","https://openalex.org/W2964082701","https://openalex.org/W2981860227","https://openalex.org/W2998074434","https://openalex.org/W3021376903","https://openalex.org/W3034579202","https://openalex.org/W3092516112","https://openalex.org/W3181500144","https://openalex.org/W3186572303","https://openalex.org/W3199792160","https://openalex.org/W3213528054","https://openalex.org/W4214951654","https://openalex.org/W4225907520","https://openalex.org/W4242053016","https://openalex.org/W4245276998","https://openalex.org/W4293846201","https://openalex.org/W4322487670","https://openalex.org/W4361215755","https://openalex.org/W4384664508","https://openalex.org/W4390280272","https://openalex.org/W4391933803","https://openalex.org/W4393146716","https://openalex.org/W4396214365","https://openalex.org/W6637373629","https://openalex.org/W6694517276","https://openalex.org/W6766978945"],"related_works":["https://openalex.org/W4253721122","https://openalex.org/W1671033612","https://openalex.org/W4389527383","https://openalex.org/W2096844293","https://openalex.org/W2363944576","https://openalex.org/W2351041855","https://openalex.org/W2570254841","https://openalex.org/W1967938402","https://openalex.org/W2386041993","https://openalex.org/W1608572506"],"abstract_inverted_index":{"Over":[0],"the":[1,5,16,35,40,47,58,101,108,155,160,175,179,188,193,205,211,215,219,228,233,243,247,250,258,263,266,272],"past":[2],"few":[3],"years,":[4],"emergence":[6],"and":[7,38,52,75,119,124,138,148,151,181,217,253],"development":[8],"of":[9,19,60,170,204,271],"design":[10,275],"space":[11],"exploration":[12],"(DSE)":[13],"have":[14],"shortened":[15],"deployment":[17],"cycle":[18],"deep":[20],"neural":[21,49],"networks":[22],"(DNNs).":[23],"As":[24],"a":[25],"result,":[26],"with":[27,238],"these":[28],"open-sourced":[29],"DSE,":[30],"we":[31,67],"can":[32,131,199,241],"automatically":[33,99],"compute":[34],"optimal":[36],"configuration":[37],"generate":[39,100],"corresponding":[41],"accelerator":[42,111],"intellectual":[43],"properties":[44],"(IPs)":[45],"from":[46,71],"pretrained":[48],"network":[50],"models":[51],"hardware":[53,79],"constraints.":[54],"However,":[55],"to":[56,94,98,202,207,222,224,245,257,262],"date,":[57],"security":[59],"DSE":[61],"has":[62],"received":[63],"little":[64],"attention.":[65],"Therefore,":[66],"explore":[68],"this":[69],"issue":[70],"an":[72,77,90],"adversarial":[73],"perspective":[74],"propose":[76],"automated":[78],"Trojan":[80],"(HT)":[81],"generation":[82],"framework":[83,88],"embedded":[84],"within":[85],"DSE.":[86],"The":[87,113],"uses":[89],"evolutionary":[91],"algorithm":[92],"(EA)":[93],"analyze":[95],"user-input":[96],"data":[97],"attack":[102],"code":[103],"before":[104],"placing":[105],"it":[106],"in":[107,168,174],"final":[109],"output":[110],"IPs.":[112],"proposed":[114,273],"HT":[115,274],"is":[116],"sufficiently":[117],"stealthy":[118],"suitable":[120],"for":[121,154,187,227],"both":[122],"single":[123],"multifield-programmable":[125],"gate":[126],"array":[127],"(FPGA)":[128],"designs.":[129],"It":[130],"also":[132],"implement":[133],"controlled":[134],"accuracy":[135,183,221],"degradation":[136],"attacks":[137],"specified":[139,177,213,251],"category":[140,176,212,252],"attacks.":[141],"We":[142],"conducted":[143],"experiments":[144],"on":[145,159,192,232],"LeNet,":[146],"VGG-16,":[147],"YOLO,":[149],"respectively,":[150],"found":[152],"that":[153],"LeNet":[156],"model":[157,190,230,244],"trained":[158,191,231],"CIFAR-10":[161],"dataset,":[162,195,236],"attacking":[163,196,237],"only":[164],"one":[165],"kernel":[166],"resulted":[167],"97.3%":[169],"images":[171,206],"being":[172],"classified":[173,209],"by":[178,184,214],"adversary":[180,216],"reduced":[182],"59.58%.":[185],"Moreover,":[186],"VGG-16":[189],"ImageNet":[194],"eight":[197,239],"kernels":[198,240],"cause":[200,242,254],"up":[201],"96.53%":[203],"be":[208],"into":[210],"causes":[218],"model's":[220],"decrease":[223],"2.5%.":[225],"Finally,":[226],"YOLO":[229],"PASCAL":[234],"VOC":[235],"identify":[246],"target":[248],"as":[249],"slight":[255],"perturbations":[256],"bounding":[259],"boxes.":[260],"Compared":[261],"un-compromised":[264],"designs,":[265],"look-up":[267],"tables":[268],"(LUTs)":[269],"overhead":[270],"does":[276],"not":[277],"exceed":[278],"0.6%.":[279]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}