{"id":"https://openalex.org/W4385688140","doi":"https://doi.org/10.1145/3600160.3600189","title":"You Only Get One-Shot: Eavesdropping Input Images to Neural Network by Spying SoC-FPGA Internal Bus","display_name":"You Only Get One-Shot: Eavesdropping Input Images to Neural Network by Spying SoC-FPGA Internal Bus","publication_year":2023,"publication_date":"2023-08-09","ids":{"openalex":"https://openalex.org/W4385688140","doi":"https://doi.org/10.1145/3600160.3600189"},"language":"en","primary_location":{"id":"doi:10.1145/3600160.3600189","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3600160.3600189","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3600189","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3600189","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008014957","display_name":"May Myat Thu","orcid":"https://orcid.org/0009-0002-5202-0524"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I28221208","display_name":"Institut National des Sciences Appliqu\u00e9es de Rennes","ror":"https://ror.org/04xaa4j22","country_code":"FR","type":"education","lineage":["https://openalex.org/I28221208"]},{"id":"https://openalex.org/I4210100151","display_name":"Institut d'\u00c9lectronique et des Technologies du num\u00e9Rique","ror":"https://ror.org/013q33h79","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I28221208","https://openalex.org/I4210095849","https://openalex.org/I4210100151","https://openalex.org/I56067802","https://openalex.org/I97188460"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]},{"id":"https://openalex.org/I97188460","display_name":"Nantes Universit\u00e9","ror":"https://ror.org/03gnr7b55","country_code":"FR","type":"education","lineage":["https://openalex.org/I97188460"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"May Myat Thu","raw_affiliation_strings":["Univ Rennes, INSA Rennes, Nantes Universit\u00e9, CNRS, IETR-UMR 6164, F-35000 Rennes, France"],"raw_orcid":"https://orcid.org/0009-0002-5202-0524","affiliations":[{"raw_affiliation_string":"Univ Rennes, INSA Rennes, Nantes Universit\u00e9, CNRS, IETR-UMR 6164, F-35000 Rennes, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I28221208","https://openalex.org/I4210100151","https://openalex.org/I56067802","https://openalex.org/I97188460"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063239633","display_name":"Maria M\u00e9ndez Real","orcid":"https://orcid.org/0000-0002-9336-9936"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I28221208","display_name":"Institut National des Sciences Appliqu\u00e9es de Rennes","ror":"https://ror.org/04xaa4j22","country_code":"FR","type":"education","lineage":["https://openalex.org/I28221208"]},{"id":"https://openalex.org/I4210100151","display_name":"Institut d'\u00c9lectronique et des Technologies du num\u00e9Rique","ror":"https://ror.org/013q33h79","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I28221208","https://openalex.org/I4210095849","https://openalex.org/I4210100151","https://openalex.org/I56067802","https://openalex.org/I97188460"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]},{"id":"https://openalex.org/I97188460","display_name":"Nantes Universit\u00e9","ror":"https://ror.org/03gnr7b55","country_code":"FR","type":"education","lineage":["https://openalex.org/I97188460"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Maria M\u00e9ndez Real","raw_affiliation_strings":["Univ Rennes, INSA Rennes, Nantes Universit\u00e9, CNRS, IETR-UMR 6164, F-35000 Rennes, France"],"raw_orcid":"https://orcid.org/0000-0002-9336-9936","affiliations":[{"raw_affiliation_string":"Univ Rennes, INSA Rennes, Nantes Universit\u00e9, CNRS, IETR-UMR 6164, F-35000 Rennes, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I28221208","https://openalex.org/I4210100151","https://openalex.org/I56067802","https://openalex.org/I97188460"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046104895","display_name":"Maxime Pelcat","orcid":"https://orcid.org/0000-0002-1158-0915"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I28221208","display_name":"Institut National des Sciences Appliqu\u00e9es de Rennes","ror":"https://ror.org/04xaa4j22","country_code":"FR","type":"education","lineage":["https://openalex.org/I28221208"]},{"id":"https://openalex.org/I4210100151","display_name":"Institut d'\u00c9lectronique et des Technologies du num\u00e9Rique","ror":"https://ror.org/013q33h79","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I28221208","https://openalex.org/I4210095849","https://openalex.org/I4210100151","https://openalex.org/I56067802","https://openalex.org/I97188460"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]},{"id":"https://openalex.org/I97188460","display_name":"Nantes Universit\u00e9","ror":"https://ror.org/03gnr7b55","country_code":"FR","type":"education","lineage":["https://openalex.org/I97188460"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Maxime Pelcat","raw_affiliation_strings":["Univ Rennes, INSA Rennes, Nantes Universit\u00e9, CNRS, IETR-UMR 6164, F-35000 Rennes, France"],"raw_orcid":"https://orcid.org/0000-0002-1158-0915","affiliations":[{"raw_affiliation_string":"Univ Rennes, INSA Rennes, Nantes Universit\u00e9, CNRS, IETR-UMR 6164, F-35000 Rennes, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I28221208","https://openalex.org/I4210100151","https://openalex.org/I56067802","https://openalex.org/I97188460"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062413439","display_name":"Philippe Besnier","orcid":"https://orcid.org/0000-0002-8398-7028"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I28221208","display_name":"Institut National des Sciences Appliqu\u00e9es de Rennes","ror":"https://ror.org/04xaa4j22","country_code":"FR","type":"education","lineage":["https://openalex.org/I28221208"]},{"id":"https://openalex.org/I4210100151","display_name":"Institut d'\u00c9lectronique et des Technologies du num\u00e9Rique","ror":"https://ror.org/013q33h79","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I28221208","https://openalex.org/I4210095849","https://openalex.org/I4210100151","https://openalex.org/I56067802","https://openalex.org/I97188460"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]},{"id":"https://openalex.org/I97188460","display_name":"Nantes Universit\u00e9","ror":"https://ror.org/03gnr7b55","country_code":"FR","type":"education","lineage":["https://openalex.org/I97188460"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Philippe Besnier","raw_affiliation_strings":["Univ Rennes, INSA Rennes, Nantes Universit\u00e9, CNRS, IETR-UMR 6164, F-35000 Rennes, France"],"raw_orcid":"https://orcid.org/0000-0002-8398-7028","affiliations":[{"raw_affiliation_string":"Univ Rennes, INSA Rennes, Nantes Universit\u00e9, CNRS, IETR-UMR 6164, F-35000 Rennes, France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I28221208","https://openalex.org/I4210100151","https://openalex.org/I56067802","https://openalex.org/I97188460"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8055,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.74079202,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7855957746505737},{"id":"https://openalex.org/keywords/field-programmable-gate-array","display_name":"Field-programmable gate array","score":0.727941632270813},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5185980796813965},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.5098847150802612},{"id":"https://openalex.org/keywords/eavesdropping","display_name":"Eavesdropping","score":0.4999959468841553},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4928579330444336},{"id":"https://openalex.org/keywords/hardware-trojan","display_name":"Hardware Trojan","score":0.480826735496521},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.42538565397262573},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.3925960659980774},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3908783495426178},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3655703663825989},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.20899584889411926},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.18413856625556946}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7855957746505737},{"id":"https://openalex.org/C42935608","wikidata":"https://www.wikidata.org/wiki/Q190411","display_name":"Field-programmable gate array","level":2,"score":0.727941632270813},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5185980796813965},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.5098847150802612},{"id":"https://openalex.org/C2776788033","wikidata":"https://www.wikidata.org/wiki/Q320769","display_name":"Eavesdropping","level":2,"score":0.4999959468841553},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4928579330444336},{"id":"https://openalex.org/C2780873074","wikidata":"https://www.wikidata.org/wiki/Q5656397","display_name":"Hardware Trojan","level":3,"score":0.480826735496521},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.42538565397262573},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.3925960659980774},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3908783495426178},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3655703663825989},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.20899584889411926},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.18413856625556946}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3600160.3600189","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3600160.3600189","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3600189","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-04226071v1","is_oa":false,"landing_page_url":"https://hal.science/hal-04226071","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"18th International Conference on Availability, Reliability and Security, ARES 2023, Aug 2023, Benevento, Italy. pp.31, ⟨10.1145/3600160.3600189⟩","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.1145/3600160.3600189","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3600160.3600189","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3600189","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/7","display_name":"Affordable and clean energy","score":0.8899999856948853}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4385688140.pdf","grobid_xml":"https://content.openalex.org/works/W4385688140.grobid-xml"},"referenced_works_count":13,"referenced_works":["https://openalex.org/W1651840573","https://openalex.org/W2007339694","https://openalex.org/W2017165380","https://openalex.org/W2565125333","https://openalex.org/W2891946740","https://openalex.org/W3091214985","https://openalex.org/W3114482311","https://openalex.org/W3155198371","https://openalex.org/W3158474254","https://openalex.org/W3183900321","https://openalex.org/W4281664040","https://openalex.org/W4289146347","https://openalex.org/W4387490939"],"related_works":["https://openalex.org/W4383472735","https://openalex.org/W2794898833","https://openalex.org/W2350856465","https://openalex.org/W3135842425","https://openalex.org/W2991606090","https://openalex.org/W2980931525","https://openalex.org/W4321062069","https://openalex.org/W2083537062","https://openalex.org/W2906523457","https://openalex.org/W2040221583"],"abstract_inverted_index":{"Deep":[0],"learning":[1],"is":[2],"currently":[3],"integrated":[4,30],"into":[5],"edge":[6],"devices":[7],"with":[8,127,151,162,193],"strong":[9],"energy":[10],"consumption":[11],"and":[12,53,71,87,104,133,187],"real-time":[13],"constraints.":[14],"To":[15],"fulfill":[16],"such":[17,33,93],"requirements,":[18],"high":[19],"hardware":[20,26,46],"performances":[21],"can":[22],"be":[23,96],"provided":[24],"by":[25,141,174,214],"acceleration":[27],"of":[28,45,62,92,102,107,154,178,197,209,221],"heterogeneous":[29],"circuits":[31],"(IC)":[32],"as":[34],"System-on-Chip":[35],"(SoC)-field":[36],"programmable":[37],"gate":[38],"arrays":[39],"(FPGAs).":[40],"With":[41],"the":[42,79,100,136,152,175,179,207,219],"rising":[43],"popularity":[44],"accelerators":[47],"for":[48],"artificial":[49],"intelligence":[50],"(AI),":[51],"more":[52,54],"neural":[55,122],"networks":[56],"are":[57,74],"employed":[58],"in":[59,82,117],"a":[60,114,118,128,155,189,200],"variety":[61],"domains,":[63],"involving":[64],"computer":[65],"vision":[66],"applications.":[67],"Autonomous":[68],"driving,":[69],"defence":[70],"medical":[72],"domains":[73],"well-known":[75],"examples":[76],"from":[77,170],"which":[78],"latter":[80],"two":[81],"particular":[83],"require":[84],"processing":[85],"sensitive":[86,168],"private":[88],"data.":[89],"Security":[90],"issues":[91],"systems":[94,213],"should":[95],"addressed":[97],"to":[98],"prevent":[99],"breach":[101],"privacy":[103],"unauthorised":[105],"exploitation":[106],"systems.":[108],"In":[109],"this":[110],"paper,":[111],"we":[112],"demonstrate":[113,149],"confidentiality":[115,208],"vulnerability":[116,205],"SoC-based":[119],"FPGA":[120],"binarized":[121],"network":[123],"(BNN)":[124],"accelerator":[125],"implemented":[126],"recent":[129],"mainstream":[130],"framework,":[131],"FINN,":[132],"successfully":[134],"extract":[135],"secret":[137],"BNN":[138],"input":[139],"image":[140,192],"using":[142,199],"an":[143,159,194],"electromagnetic":[144],"(EM)":[145],"side-channel":[146],"attack.":[147],"Experiments":[148],"that":[150,217],"help":[153],"near-field":[156],"magnetic":[157],"probe,":[158],"attacker":[160],"can,":[161],"only":[163],"one":[164],"inference,":[165],"directly":[166],"retrieve":[167],"information":[169],"EM":[171],"emanations":[172],"produced":[173],"internal":[176,185],"bus":[177],"SoC-FPGA.":[180],"Our":[181],"attack":[182],"reconstructs":[183],"SoC-FPGA":[184,210],"images":[186],"recognizes":[188],"handwritten":[190],"digit":[191],"average":[195],"accuracy":[196],"89%":[198],"non-retrained":[201],"MNIST":[202],"classifier.":[203],"Such":[204],"jeopardizes":[206],"embedded":[211],"AI":[212],"exploiting":[215],"side-channels":[216],"withstand":[218],"protection":[220],"chip":[222],"I/Os":[223],"through":[224],"cryptographic":[225],"methods.":[226]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2025-10-10T00:00:00"}