{"id":"https://openalex.org/W4313645430","doi":"https://doi.org/10.1145/3579033","title":"<scp>AroMa</scp> : Evaluating Deep Learning Systems for Stealthy Integrity Attacks on Multi-tenant Accelerators","display_name":"<scp>AroMa</scp> : Evaluating Deep Learning Systems for Stealthy Integrity Attacks on Multi-tenant Accelerators","publication_year":2023,"publication_date":"2023-01-06","ids":{"openalex":"https://openalex.org/W4313645430","doi":"https://doi.org/10.1145/3579033"},"language":"en","primary_location":{"id":"doi:10.1145/3579033","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3579033","pdf_url":null,"source":{"id":"https://openalex.org/S96198239","display_name":"ACM Journal on Emerging Technologies in Computing Systems","issn_l":"1550-4832","issn":["1550-4832","1550-4840"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Journal on Emerging Technologies in Computing Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5074941666","display_name":"Xiangru Chen","orcid":"https://orcid.org/0000-0003-4722-2084"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiangru Chen","raw_affiliation_strings":["University of Florida, Gainesville, Florida, USA"],"raw_orcid":"https://orcid.org/0000-0003-4722-2084","affiliations":[{"raw_affiliation_string":"University of Florida, Gainesville, Florida, USA","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066079078","display_name":"Maneesh Merugu","orcid":"https://orcid.org/0000-0002-0124-8839"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Maneesh Merugu","raw_affiliation_strings":["University of Florida, Gainesville, Florida, USA"],"raw_orcid":"https://orcid.org/0000-0002-0124-8839","affiliations":[{"raw_affiliation_string":"University of Florida, Gainesville, Florida, USA","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100349804","display_name":"Jiaqi Zhang","orcid":"https://orcid.org/0000-0002-3714-3414"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiaqi Zhang","raw_affiliation_strings":["University of Florida, Gainesville, Florida, USA"],"raw_orcid":"https://orcid.org/0000-0002-3714-3414","affiliations":[{"raw_affiliation_string":"University of Florida, Gainesville, Florida, USA","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068991400","display_name":"Sandip Ray","orcid":"https://orcid.org/0000-0002-8671-5052"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sandip Ray","raw_affiliation_strings":["University of Florida, Gainesville, Florida, USA"],"raw_orcid":"https://orcid.org/0000-0002-8671-5052","affiliations":[{"raw_affiliation_string":"University of Florida, Gainesville, Florida, USA","institution_ids":["https://openalex.org/I33213144"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I33213144"],"apc_list":null,"apc_paid":null,"fwci":0.3226,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.61799063,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"19","issue":"2","first_page":"1","last_page":"17"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7062347531318665},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.6375653743743896},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4767285883426666},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3622586131095886}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7062347531318665},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.6375653743743896},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4767285883426666},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3622586131095886}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3579033","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3579033","pdf_url":null,"source":{"id":"https://openalex.org/S96198239","display_name":"ACM Journal on Emerging Technologies in Computing Systems","issn_l":"1550-4832","issn":["1550-4832","1550-4840"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Journal on Emerging Technologies in Computing Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7799999713897705,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1155478758","display_name":null,"funder_award_id":"2021-HWS-3060","funder_id":"https://openalex.org/F4320306087","funder_display_name":"Semiconductor Research Corporation"}],"funders":[{"id":"https://openalex.org/F4320306087","display_name":"Semiconductor Research Corporation","ror":"https://ror.org/047z4n946"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W2073826979","https://openalex.org/W2095577883","https://openalex.org/W2097117768","https://openalex.org/W2100721436","https://openalex.org/W2108598243","https://openalex.org/W2134557905","https://openalex.org/W2157116240","https://openalex.org/W2194775991","https://openalex.org/W2416799949","https://openalex.org/W2604272474","https://openalex.org/W2767260595","https://openalex.org/W2768121648","https://openalex.org/W2794898833","https://openalex.org/W2807835252","https://openalex.org/W2883929540","https://openalex.org/W2946682676","https://openalex.org/W2997176276","https://openalex.org/W3021234123","https://openalex.org/W3039010666","https://openalex.org/W3046609696","https://openalex.org/W3046853140","https://openalex.org/W3046859417","https://openalex.org/W3048592926","https://openalex.org/W3087891367","https://openalex.org/W3107241502","https://openalex.org/W3114687924","https://openalex.org/W3155198371","https://openalex.org/W3171753110","https://openalex.org/W3181637428","https://openalex.org/W3183712254","https://openalex.org/W3194922745","https://openalex.org/W4206259781","https://openalex.org/W4242053016","https://openalex.org/W4252174618","https://openalex.org/W4280604977"],"related_works":["https://openalex.org/W2731899572","https://openalex.org/W3215138031","https://openalex.org/W3009238340","https://openalex.org/W2939353110","https://openalex.org/W4321369474","https://openalex.org/W4360585206","https://openalex.org/W4285208911","https://openalex.org/W3082895349","https://openalex.org/W4213079790","https://openalex.org/W2248239756"],"abstract_inverted_index":{"Multi-tenant":[0],"applications":[1,28],"have":[2],"been":[3],"proliferating":[4],"in":[5],"recent":[6],"years,":[7],"supported":[8],"by":[9,86],"the":[10,91,103],"emergence":[11],"of":[12,27,41,66,79,90,105,109],"computing-as-service":[13],"paradigms.":[14],"Unfortunately,":[15],"multi-tenancy":[16,106],"induces":[17],"new":[18],"security":[19,108],"vulnerabilities":[20],"due":[21],"to":[22,58,101,125],"spatial":[23],"or":[24],"temporal":[25],"co-location":[26],"with":[29],"possibly":[30],"malicious":[31],"intent.":[32],"In":[33],"this":[34],"article,":[35],"we":[36],"consider":[37],"a":[38],"special":[39],"class":[40],"stealthy":[42],"integrity":[43,61,114],"attacks":[44,62,85,115],"on":[45,63,107,116,123],"multi-tenant":[46],"deep":[47,67,110],"learning":[48,68,111],"accelerators.":[49],"One":[50],"interesting":[51],"conclusion":[52],"is":[53,56],"that":[54,71],"it":[55,72],"possible":[57],"perform":[59],"targeted":[60],"kernel":[64],"weights":[65],"systems":[69],"such":[70],"remains":[73],"functional":[74],"but":[75],"mis-labels":[76],"specific":[77],"categories":[78],"input":[80],"data":[81],"through":[82],"standard":[83],"RowHammer":[84],"only":[87],"changing":[88],"0.0009%":[89],"total":[92],"weights.":[93],"We":[94,119],"develop":[95],"an":[96],"automated":[97],"framework,":[98],"AroMa":[99,124],",":[100],"evaluate":[102],"impact":[104],"accelerators":[112],"against":[113],"memory":[117],"systems.":[118],"present":[120],"extensive":[121],"evaluations":[122],"demonstrate":[126],"its":[127],"effectiveness.":[128]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}