{"id":"https://openalex.org/W4210690620","doi":"https://doi.org/10.1145/3505634","title":"<i>NN-Lock</i> : A Lightweight Authorization to Prevent IP Threats of Deep Learning Models","display_name":"<i>NN-Lock</i> : A Lightweight Authorization to Prevent IP Threats of Deep Learning Models","publication_year":2022,"publication_date":"2022-02-02","ids":{"openalex":"https://openalex.org/W4210690620","doi":"https://doi.org/10.1145/3505634"},"language":"en","primary_location":{"id":"doi:10.1145/3505634","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3505634","pdf_url":null,"source":{"id":"https://openalex.org/S96198239","display_name":"ACM Journal on Emerging Technologies in Computing Systems","issn_l":"1550-4832","issn":["1550-4832","1550-4840"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Journal on Emerging Technologies in Computing Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053280523","display_name":"Manaar Alam","orcid":"https://orcid.org/0000-0002-3338-2944"},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Manaar Alam","raw_affiliation_strings":["Indian Institute of Technology Kharagpur, Kharagpur, West Bengal, India"],"raw_orcid":"https://orcid.org/0000-0002-3338-2944","affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Kharagpur, Kharagpur, West Bengal, India","institution_ids":["https://openalex.org/I145894827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101432394","display_name":"Sayandeep Saha","orcid":"https://orcid.org/0000-0002-5535-1102"},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sayandeep Saha","raw_affiliation_strings":["Indian Institute of Technology Kharagpur, Kharagpur, West Bengal, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Kharagpur, Kharagpur, West Bengal, India","institution_ids":["https://openalex.org/I145894827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078971402","display_name":"Debdeep Mukhopadhyay","orcid":"https://orcid.org/0000-0002-6499-8346"},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Debdeep Mukhopadhyay","raw_affiliation_strings":["Indian Institute of Technology Kharagpur, Kharagpur, West Bengal, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Kharagpur, Kharagpur, West Bengal, India","institution_ids":["https://openalex.org/I145894827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054064879","display_name":"Sandip Kundu","orcid":"https://orcid.org/0000-0001-8221-3824"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sandip Kundu","raw_affiliation_strings":["University of Massachusetts Amherst, Amherst, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts Amherst, Amherst, MA, USA","institution_ids":["https://openalex.org/I24603500"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.971,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":{"value":0.87536253,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"18","issue":"3","first_page":"1","last_page":"19"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7602912187576294},{"id":"https://openalex.org/keywords/lock","display_name":"Lock (firearm)","score":0.6565621495246887},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.6272256970405579},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5925314426422119},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.525585949420929},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.47987595200538635},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4061940312385559},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3674269914627075},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.33003413677215576},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14728295803070068},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12126964330673218}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7602912187576294},{"id":"https://openalex.org/C174839445","wikidata":"https://www.wikidata.org/wiki/Q1134386","display_name":"Lock (firearm)","level":2,"score":0.6565621495246887},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.6272256970405579},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5925314426422119},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.525585949420929},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.47987595200538635},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4061940312385559},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3674269914627075},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33003413677215576},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14728295803070068},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12126964330673218},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3505634","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3505634","pdf_url":null,"source":{"id":"https://openalex.org/S96198239","display_name":"ACM Journal on Emerging Technologies in Computing Systems","issn_l":"1550-4832","issn":["1550-4832","1550-4840"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Journal on Emerging Technologies in Computing Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7200000286102295,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1511360501","https://openalex.org/W1524250393","https://openalex.org/W2117758617","https://openalex.org/W2183341477","https://openalex.org/W2594877703","https://openalex.org/W2766393343","https://openalex.org/W2768064608","https://openalex.org/W2810801906","https://openalex.org/W2890753317","https://openalex.org/W2899585792","https://openalex.org/W2902639362","https://openalex.org/W2935349488","https://openalex.org/W2963303354","https://openalex.org/W2982600570","https://openalex.org/W3092142741","https://openalex.org/W3092557510","https://openalex.org/W3102733833","https://openalex.org/W3114482311","https://openalex.org/W3158697642","https://openalex.org/W4232426554","https://openalex.org/W4288289336","https://openalex.org/W4289146347","https://openalex.org/W6765460584"],"related_works":["https://openalex.org/W2389214306","https://openalex.org/W2363983170","https://openalex.org/W2270181498","https://openalex.org/W2965083567","https://openalex.org/W4235240664","https://openalex.org/W1838576100","https://openalex.org/W2757182831","https://openalex.org/W2095886385","https://openalex.org/W4234217599","https://openalex.org/W4256686968"],"abstract_inverted_index":{"The":[0,91,147,188],"prevalent":[1],"usage":[2,54],"and":[3,162],"unparalleled":[4],"recent":[5,177],"success":[6,174],"of":[7,17,32,55,73,113,137,143,150,191,196,211,220],"Deep":[8],"Neural":[9],"Network":[10],"(DNN)":[11],"applications":[12],"have":[13],"raised":[14],"the":[15,30,79,107,135,154,158,168,221],"concern":[16],"protecting":[18],"their":[19,228],"Intellectual":[20],"Property":[21],"(IP)":[22],"rights":[23],"in":[24,201],"different":[25],"business":[26],"models":[27],"to":[28,50,69],"prevent":[29],"theft":[31],"trade":[33],"secrets.":[34],"In":[35],"this":[36],"article,":[37],"we":[38],"propose":[39],"a":[40,62,74,84,88,100,116,138,144,163,212],"lightweight,":[41],"generic,":[42],"key-based":[43],"DNN":[44,57,76,109,123,213,223],"IP":[45,178],"protection":[46,179],"methodology,":[47],"NN-Lock":[48,59,114,192,204],",":[49],"defend":[51],"against":[52,157,175,193],"unauthorized":[53],"stolen":[56],"models.":[58],"utilizes":[60],"SBox,":[61],"cryptographic":[63],"primitive,":[64],"with":[65,78,99],"good":[66],"security":[67,189],"properties":[68],"encrypt":[70],"each":[71],"parameter":[72],"trained":[75],"model":[77,140,159],"secret":[80],"keys":[81],"derived":[82],"from":[83],"master":[85,102,133],"key":[86,103],"through":[87],"key-scheduling":[89],"algorithm.":[90],"method":[92,155],"ensures":[93],"that":[94,129,142],"only":[95],"an":[96,131],"authorized":[97],"user":[98],"correct":[101],"can":[104],"accurately":[105],"use":[106],"locked":[108,139],"model.":[110],"Evaluation":[111],"results":[112],"on":[115,125],"Google":[117],"Coral":[118],"edge":[119],"device":[120],"for":[121,130,218],"various":[122],"architectures":[124],"several":[126],"datasets":[127],"show":[128],"incorrect":[132],"key,":[134],"accuracy":[136],"is":[141],"random":[145],"classifier.":[146],"dense":[148],"network":[149],"encrypted":[151],"parameters":[152],"makes":[153],"robust":[156],"fine-tuning":[160],"attack":[161,166],"novel":[164],"approximation":[165],"using":[167],"Genetic":[169],"Algorithm,":[170],"which":[171],"achieves":[172],"reasonable":[173],"another":[176],"scheme":[180],"called":[181],"HPNN":[182],"Chakraborty":[183],"et":[184],"al.":[185],"2020":[186],".":[187],"evaluation":[190],"other":[194],"families":[195],"attacks":[197],"demonstrates":[198],"its":[199],"soundness":[200],"practical":[202],"scenarios.":[203],"does":[205],"not":[206],"modify":[207],"any":[208],"internal":[209],"structure":[210],"model,":[214],"making":[215],"it":[216],"scalable":[217],"all":[219],"existing":[222],"implementations":[224],"without":[225],"adversely":[226],"affecting":[227],"performance.":[229]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}