{"id":"https://openalex.org/W4293024088","doi":"https://doi.org/10.1145/3489517.3530439","title":"GuardNN","display_name":"GuardNN","publication_year":2022,"publication_date":"2022-07-10","ids":{"openalex":"https://openalex.org/W4293024088","doi":"https://doi.org/10.1145/3489517.3530439"},"language":"en","primary_location":{"id":"doi:10.1145/3489517.3530439","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3489517.3530439","pdf_url":null,"source":{"id":"https://openalex.org/S4363608816","display_name":"Proceedings of the 59th ACM/IEEE Design Automation Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 59th ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5025545085","display_name":"Weizhe Hua","orcid":"https://orcid.org/0000-0002-5231-9799"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Weizhe Hua","raw_affiliation_strings":["Cornell University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell University","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101745975","display_name":"Muhammad Umar","orcid":"https://orcid.org/0000-0001-7460-1341"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Muhammad Umar","raw_affiliation_strings":["Cornell University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell University","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037210004","display_name":"Zhiru Zhang","orcid":"https://orcid.org/0000-0002-0778-0308"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiru Zhang","raw_affiliation_strings":["Cornell University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell University","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024329178","display_name":"G. Edward Suh","orcid":"https://orcid.org/0000-0001-6409-9888"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"G. Edward Suh","raw_affiliation_strings":["Cornell University and Meta AI"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell University and Meta AI","institution_ids":["https://openalex.org/I205783295"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I205783295"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":26,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"349","last_page":"354"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.801817774772644},{"id":"https://openalex.org/keywords/memory-protection","display_name":"Memory protection","score":0.7994301319122314},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.6859728693962097},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6695477962493896},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.6147637963294983},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.6081061959266663},{"id":"https://openalex.org/keywords/field-programmable-gate-array","display_name":"Field-programmable gate array","score":0.44208720326423645},{"id":"https://openalex.org/keywords/memory-management","display_name":"Memory management","score":0.32346946001052856},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.30758869647979736},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.27932390570640564},{"id":"https://openalex.org/keywords/semiconductor-memory","display_name":"Semiconductor memory","score":0.11780655384063721},{"id":"https://openalex.org/keywords/virtual-memory","display_name":"Virtual memory","score":0.09343239665031433}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.801817774772644},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.7994301319122314},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.6859728693962097},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6695477962493896},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.6147637963294983},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.6081061959266663},{"id":"https://openalex.org/C42935608","wikidata":"https://www.wikidata.org/wiki/Q190411","display_name":"Field-programmable gate array","level":2,"score":0.44208720326423645},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.32346946001052856},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.30758869647979736},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27932390570640564},{"id":"https://openalex.org/C98986596","wikidata":"https://www.wikidata.org/wiki/Q1143031","display_name":"Semiconductor memory","level":2,"score":0.11780655384063721},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.09343239665031433}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3489517.3530439","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3489517.3530439","pdf_url":null,"source":{"id":"https://openalex.org/S4363608816","display_name":"Proceedings of the 59th ACM/IEEE Design Automation Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 59th ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7413310736","display_name":null,"funder_award_id":"CCF-2007832, ECCS-1932501, CCF-2118709","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320308737","display_name":"Facebook","ror":"https://ror.org/01zbnvs85"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W2484015479","https://openalex.org/W2516141709","https://openalex.org/W2567113185","https://openalex.org/W2809523935","https://openalex.org/W2930957133","https://openalex.org/W2944442501","https://openalex.org/W2966773103","https://openalex.org/W2979832172","https://openalex.org/W2979838629","https://openalex.org/W3015584356","https://openalex.org/W3016063723","https://openalex.org/W3093021001","https://openalex.org/W3097528158","https://openalex.org/W3104454153","https://openalex.org/W3216987697","https://openalex.org/W4211049611","https://openalex.org/W4214482727","https://openalex.org/W4289146347"],"related_works":["https://openalex.org/W2368477821","https://openalex.org/W1584308544","https://openalex.org/W2069613115","https://openalex.org/W2379457214","https://openalex.org/W2055367414","https://openalex.org/W2138847","https://openalex.org/W2140386982","https://openalex.org/W2052673929","https://openalex.org/W141798819","https://openalex.org/W4285345538"],"abstract_inverted_index":{"This":[0],"paper":[1],"proposes":[2],"GuardNN,":[3],"a":[4,34,70,98],"secure":[5],"DNN":[6,99],"accelerator":[7,60],"that":[8,25],"provides":[9],"hardware-based":[10],"protection":[11,29,64,90,110],"for":[12,33,91,115],"user":[13],"data":[14],"and":[15,28,41,61,82],"model":[16],"parameters":[17],"even":[18,65],"in":[19],"an":[20,105],"untrusted":[21],"environment.":[22],"GuardNN":[23,51,75,101],"shows":[24],"the":[26,50,55,59,67,77,87,92],"architecture":[27],"can":[30],"be":[31,73],"customized":[32],"specific":[35],"application":[36],"to":[37,57],"provide":[38],"strong":[39],"confidentiality":[40,63,109],"integrity":[42,83],"guarantees":[43],"with":[44,111],"negligible":[45],"overhead.":[46],"The":[47],"design":[48],"of":[49,79,97],"instruction":[52],"set":[53],"reduces":[54],"TCB":[56],"just":[58],"allows":[62],"when":[66],"instructions":[68],"from":[69],"host":[71],"cannot":[72],"trusted.":[74],"minimizes":[76],"overhead":[78,114],"memory":[80,89,94],"encryption":[81],"verification":[84],"by":[85],"customizing":[86],"off-chip":[88],"known":[93],"access":[95],"patterns":[96],"accelerator.":[100],"is":[102],"prototyped":[103],"on":[104],"FPGA,":[106],"demonstrating":[107],"effective":[108],"~3%":[112],"performance":[113],"inference.":[116]},"counts_by_year":[{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":4}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2022-08-25T00:00:00"}