{"id":"https://openalex.org/W7131418278","doi":"https://doi.org/10.1109/tr.2026.3667808","title":"SOFAN: Side-Channel Oriented Fingerprinting and Neutralization for TVM-Compiled DNNs","display_name":"SOFAN: Side-Channel Oriented Fingerprinting and Neutralization for TVM-Compiled DNNs","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7131418278","doi":"https://doi.org/10.1109/tr.2026.3667808"},"language":null,"primary_location":{"id":"doi:10.1109/tr.2026.3667808","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tr.2026.3667808","pdf_url":null,"source":{"id":"https://openalex.org/S87725633","display_name":"IEEE Transactions on Reliability","issn_l":"0018-9529","issn":["0018-9529","1558-1721"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Reliability","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011508710","display_name":"M. Li","orcid":null},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Minghui Li","raw_affiliation_strings":["College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-5626-7164","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China","institution_ids":["https://openalex.org/I9842412"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126821895","display_name":"Yang Li","orcid":null},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Li","raw_affiliation_strings":["College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-0489-2742","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China","institution_ids":["https://openalex.org/I9842412"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013760837","display_name":"Changchun Yin","orcid":"https://orcid.org/0000-0002-4153-5963"},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Changchun Yin","raw_affiliation_strings":["College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-4153-5963","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China","institution_ids":["https://openalex.org/I9842412"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Mingwei Li","orcid":"https://orcid.org/0009-0006-6410-2999"},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingwei Li","raw_affiliation_strings":["College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China"],"raw_orcid":"https://orcid.org/0009-0006-6410-2999","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China","institution_ids":["https://openalex.org/I9842412"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5095845359","display_name":"Liming Fang","orcid":null},"institutions":[{"id":"https://openalex.org/I9842412","display_name":"Nanjing University of Aeronautics and Astronautics","ror":"https://ror.org/01scyh794","country_code":"CN","type":"education","lineage":["https://openalex.org/I9842412"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liming Fang","raw_affiliation_strings":["College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-1420-2047","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Nanjing University of Aeronautics and Astronautics, Nanjing, China","institution_ids":["https://openalex.org/I9842412"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I9842412"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.18958245,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"75","issue":null,"first_page":"1118","last_page":"1132"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.6319000124931335,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.6319000124931335,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12131","display_name":"Wireless Signal Modulation Classification","score":0.0917000025510788,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.07680000364780426,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5472999811172485},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.5393000245094299},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.507099986076355},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.48510000109672546},{"id":"https://openalex.org/keywords/schedule","display_name":"Schedule","score":0.44850000739097595},{"id":"https://openalex.org/keywords/scheduling","display_name":"Scheduling (production processes)","score":0.42289999127388},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.41929998993873596},{"id":"https://openalex.org/keywords/principle-of-compositionality","display_name":"Principle of compositionality","score":0.40799999237060547},{"id":"https://openalex.org/keywords/segmentation","display_name":"Segmentation","score":0.3790000081062317}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7937999963760376},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.5536999702453613},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5472999811172485},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.5393000245094299},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.507099986076355},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.48510000109672546},{"id":"https://openalex.org/C68387754","wikidata":"https://www.wikidata.org/wiki/Q7271585","display_name":"Schedule","level":2,"score":0.44850000739097595},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.42289999127388},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.41929998993873596},{"id":"https://openalex.org/C121375916","wikidata":"https://www.wikidata.org/wiki/Q936559","display_name":"Principle of compositionality","level":2,"score":0.40799999237060547},{"id":"https://openalex.org/C89600930","wikidata":"https://www.wikidata.org/wiki/Q1423946","display_name":"Segmentation","level":2,"score":0.3790000081062317},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.36649999022483826},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3481999933719635},{"id":"https://openalex.org/C145428669","wikidata":"https://www.wikidata.org/wiki/Q471748","display_name":"Exception handling","level":2,"score":0.3375000059604645},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.32739999890327454},{"id":"https://openalex.org/C17020691","wikidata":"https://www.wikidata.org/wiki/Q139677","display_name":"Operator (biology)","level":5,"score":0.32580000162124634},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3255000114440918},{"id":"https://openalex.org/C12186640","wikidata":"https://www.wikidata.org/wiki/Q6815743","display_name":"Memory model","level":3,"score":0.32510000467300415},{"id":"https://openalex.org/C28180684","wikidata":"https://www.wikidata.org/wiki/Q4080983","display_name":"Memory safety","level":3,"score":0.3181000053882599},{"id":"https://openalex.org/C189783530","wikidata":"https://www.wikidata.org/wiki/Q352090","display_name":"CPU cache","level":3,"score":0.3172999918460846},{"id":"https://openalex.org/C158525013","wikidata":"https://www.wikidata.org/wiki/Q2593739","display_name":"Fusion","level":2,"score":0.30480000376701355},{"id":"https://openalex.org/C200833197","wikidata":"https://www.wikidata.org/wiki/Q333707","display_name":"Compile time","level":3,"score":0.3043000102043152},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2944999933242798},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.29190000891685486},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2874999940395355},{"id":"https://openalex.org/C88516994","wikidata":"https://www.wikidata.org/wiki/Q1268863","display_name":"Dynamic time warping","level":2,"score":0.27869999408721924},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2752000093460083},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2711000144481659},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.2587999999523163}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tr.2026.3667808","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tr.2026.3667808","pdf_url":null,"source":{"id":"https://openalex.org/S87725633","display_name":"IEEE Transactions on Reliability","issn_l":"0018-9529","issn":["0018-9529","1558-1721"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Reliability","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Climate action","id":"https://metadata.un.org/sdg/13","score":0.4527655243873596}],"awards":[{"id":"https://openalex.org/G2186036128","display_name":null,"funder_award_id":"62272228","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G572481615","display_name":null,"funder_award_id":"U22B2029","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W2804883849","https://openalex.org/W2891810898","https://openalex.org/W3004659153","https://openalex.org/W3046853140","https://openalex.org/W3102836279","https://openalex.org/W3183268554","https://openalex.org/W4226176886","https://openalex.org/W4313437286","https://openalex.org/W4367021361","https://openalex.org/W4394842027","https://openalex.org/W4403918466","https://openalex.org/W4404952949","https://openalex.org/W4405182415","https://openalex.org/W4412046594","https://openalex.org/W4413394446","https://openalex.org/W4414871386"],"related_works":[],"abstract_inverted_index":{"Deep":[0],"learning":[1],"compilers":[2],"such":[3,61],"as":[4,62],"TVM":[5],"lower":[6],"neural":[7],"networks":[8],"through":[9],"intermediate":[10],"representations":[11],"(IRs)":[12],"into":[13],"optimized,":[14],"hardware-specific":[15],"binaries.":[16],"While":[17],"enabling":[18],"high-performance":[19],"deployment":[20],"via":[21,96,136],"optimizations":[22],"like":[23],"operator":[24,94],"fusion":[25,108,153],"and":[26,77,89,101,141,152,157,179,187],"loop":[27],"tiling,":[28],"they":[29],"leave":[30],"stable":[31],"execution":[32],"signatures":[33],"exploitable":[34],"by":[35,167],"reverse":[36],"engineering.":[37],"Prior":[38],"attacks":[39],"often":[40],"rely":[41],"on":[42,173],"a":[43,73,145],"single":[44],"modality,":[45],"symbolic":[46],"lifting,":[47],"instruction":[48,117],"classification,":[49],"or":[50,67],"side":[51],"channels,":[52],"each":[53],"struggles":[54],"under":[55,144,175],"at":[56],"least":[57],"one":[58],"realistic":[59],"condition,":[60],"deep":[63],"fusion,":[64],"schedule":[65,137],"diversity,":[66],"OS":[68],"noise.":[69],"We":[70],"present":[71],"SOFAN,":[72],"side-channel":[74,114],"oriented":[75],"fingerprinting":[76],"neutralization":[78],"framework":[79],"for":[80,196],"TVM-compiled":[81],"DNNs.":[82],"On":[83,124],"the":[84,125],"attack":[85,165,186],"side,":[86,127],"TCScaptures":[87],"timing":[88],"cache":[90],"traces":[91],"to":[92,119,169],"recover":[93],"boundaries":[95],"smoothing,":[97],"non-maximum":[98],"suppression":[99],"(NMS),":[100],"dynamic":[102],"time":[103],"warping":[104],"(DTW).":[105],"A":[106],"multimodal":[107],"network":[109],"(MFN)":[110],"then":[111],"integrates":[112],"these":[113],"signals":[115],"with":[116,189],"embeddings":[118],"classify":[120],"deeply":[121],"fused":[122],"operators.":[123],"defense":[126,188],"LASR":[128,162],"(Leakage-Aware":[129],"Schedule":[130],"Rewriting)":[131],"selectively":[132],"perturbs":[133],"critical":[134],"leakage":[135],"diversification,":[138],"access":[139],"equalization,":[140],"memory":[142,181],"remapping,":[143],"fixed":[146],"runtime":[147,177],"budget.":[148],"Evaluated":[149],"across":[150],"CNNs":[151],"schedules,":[154],"SOFANimproves":[155],"segmentation":[156],"recognition":[158],"over":[159],"prior":[160],"baselines.":[161],"reduces":[163],"Top-1":[164],"accuracy":[166],"up":[168],"24":[170],"points":[171],"(16":[172],"average)":[174],"10-20%":[176],"overhead":[178],"minimal":[180],"cost.":[182],"By":[183],"aligning":[184],"both":[185],"compiler":[190],"boundaries,":[191],"SOFANenables":[192],"practical,":[193],"budget-aware":[194],"protection":[195],"real-world":[197],"deployments.":[198]},"counts_by_year":[],"updated_date":"2026-03-14T06:41:57.775601","created_date":"2026-02-26T00:00:00"}