{"id":"https://openalex.org/W4404133720","doi":"https://doi.org/10.1145/3649329.3654810","title":"Garrison: A High-Performance GPU-Accelerated Inference System for Adversarial Ensemble Defense","display_name":"Garrison: A High-Performance GPU-Accelerated Inference System for Adversarial Ensemble Defense","publication_year":2024,"publication_date":"2024-06-23","ids":{"openalex":"https://openalex.org/W4404133720","doi":"https://doi.org/10.1145/3649329.3654810"},"language":"en","primary_location":{"id":"doi:10.1145/3649329.3654810","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3649329.3654810","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 61st ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5115601765","display_name":"Yan Wang","orcid":"https://orcid.org/0009-0005-2485-0899"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yan Wang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences; School of Cyber Security, University of Chinese Academy of Sciences, Beijing, Beijing, China","School of Cyber Security, University of Chinese Academy of Sciences, Beijing, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0005-2485-0899","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences; School of Cyber Security, University of Chinese Academy of Sciences, Beijing, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I4210165038"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036982595","display_name":"Xingbin Wang","orcid":"https://orcid.org/0000-0002-1432-6429"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xingbin Wang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1432-6429","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015862017","display_name":"Zechao Lin","orcid":"https://orcid.org/0009-0006-8733-6907"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zechao Lin","raw_affiliation_strings":["Institute of Information Engineering,Chinese Academy of Sciences, Beijing, Beijing, China","School of Cyber Security, University of Chinese Academy of Sciences, Beijing, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0006-8733-6907","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,Chinese Academy of Sciences, Beijing, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103044998","display_name":"Yulan Su","orcid":"https://orcid.org/0000-0002-7539-7132"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yulan Su","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, Beijing, China","School of Cyber Security, University of Chinese Academy of Sciences, Beijing, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-7539-7132","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047558662","display_name":"Sisi Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sisi Zhang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-3746-8083","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013903881","display_name":"Rui Hou","orcid":"https://orcid.org/0000-0002-9215-7632"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rui Hou","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9215-7632","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054693503","display_name":"Dan Meng","orcid":"https://orcid.org/0009-0002-9868-5353"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dan Meng","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0002-9868-5353","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9889000058174133,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11216","display_name":"Radiation Detection and Scintillator Technologies","score":0.9800000190734863,"subfield":{"id":"https://openalex.org/subfields/3108","display_name":"Radiation"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.7085891962051392},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.699820876121521},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6983892917633057},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.5010592937469482},{"id":"https://openalex.org/keywords/supercomputer","display_name":"Supercomputer","score":0.4634309709072113},{"id":"https://openalex.org/keywords/general-purpose-computing-on-graphics-processing-units","display_name":"General-purpose computing on graphics processing units","score":0.4238736927509308},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3950692415237427},{"id":"https://openalex.org/keywords/computer-graphics","display_name":"Computer graphics (images)","score":0.3490638732910156},{"id":"https://openalex.org/keywords/graphics","display_name":"Graphics","score":0.12893256545066833}],"concepts":[{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.7085891962051392},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.699820876121521},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6983892917633057},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.5010592937469482},{"id":"https://openalex.org/C83283714","wikidata":"https://www.wikidata.org/wiki/Q121117","display_name":"Supercomputer","level":2,"score":0.4634309709072113},{"id":"https://openalex.org/C50630238","wikidata":"https://www.wikidata.org/wiki/Q971505","display_name":"General-purpose computing on graphics processing units","level":3,"score":0.4238736927509308},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3950692415237427},{"id":"https://openalex.org/C121684516","wikidata":"https://www.wikidata.org/wiki/Q7600677","display_name":"Computer graphics (images)","level":1,"score":0.3490638732910156},{"id":"https://openalex.org/C21442007","wikidata":"https://www.wikidata.org/wiki/Q1027879","display_name":"Graphics","level":2,"score":0.12893256545066833}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3649329.3654810","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3649329.3654810","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 61st ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2176922536","display_name":null,"funder_award_id":"62272459","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W2565600385","https://openalex.org/W2570685808","https://openalex.org/W2999012726","https://openalex.org/W3033527233","https://openalex.org/W3090036562","https://openalex.org/W3097411828","https://openalex.org/W3133309250","https://openalex.org/W3176432129","https://openalex.org/W3210387949","https://openalex.org/W3213501875","https://openalex.org/W4221044115","https://openalex.org/W4312965024","https://openalex.org/W4320167910","https://openalex.org/W4321017685","https://openalex.org/W6750404860","https://openalex.org/W6774348459","https://openalex.org/W6849644071"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W2384867379","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W4400094300","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W1599154403","https://openalex.org/W1980160788"],"abstract_inverted_index":{"In":[0],"the":[1,27,103,153],"face":[2],"of":[3,26,39,106,119],"huge":[4],"threats":[5],"from":[6],"adversarial":[7,34,75,137],"attacks,":[8,35],"developing":[9],"an":[10,71],"efficient":[11],"defense":[12,22,49,77,121],"mechanism":[13],"is":[14,24,56],"crucial":[15],"for":[16,31,74],"deep":[17],"learning":[18],"systems.":[19],"Adversarial":[20],"ensemble":[21,48,76,118,145],"method":[23],"one":[25],"most":[28],"effective":[29],"techniques":[30],"defending":[32],"against":[33],"which":[36,80],"constructs":[37],"ensembles":[38],"multiple":[40],"DNNs":[41],"to":[42,61,123,141,149,152],"improve":[43,136],"model's":[44],"robustness.":[45],"However,":[46],"deploying":[47],"methods":[50],"on":[51,102],"existing":[52],"DNN":[53],"inference":[54,72,146,155],"systems":[55],"inefficient":[57],"and":[58,64,84],"impractical":[59],"due":[60],"their":[62],"dynamics":[63],"randomness.":[65],"To":[66],"this":[67],"end,":[68],"we":[69],"propose":[70],"system":[73],"called":[78],"Garrison,":[79],"can":[81,135],"deliver":[82],"robust":[83],"low-latency":[85],"predictions":[86],"using":[87],"Multi-Instance":[88],"GPUs.":[89,107],"Garrison":[90,134],"employs":[91],"a":[92,111],"multi-granularity":[93],"GPU":[94],"partitioning":[95],"strategy,":[96],"optimizing":[97],"hardware":[98],"utilization":[99],"by":[100,139,147],"capitalizing":[101],"intrinsic":[104],"heterogeneity":[105],"It":[108],"also":[109],"integrates":[110],"reinforcement":[112],"learning-based":[113],"scheduling":[114],"mechanism,":[115],"enabling":[116],"random":[117],"diverse":[120],"models":[122],"enhance":[124],"robustness":[125,138],"while":[126,143],"maintaining":[127],"bounded":[128],"latency.":[129],"Our":[130],"evaluations":[131],"show":[132],"that":[133],"up":[140,148],"24.5%,":[142],"accelerating":[144],"6.6X":[150],"compared":[151],"state-of-the-art":[154],"framework.":[156]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}