{"id":"https://openalex.org/W7163187821","doi":"https://doi.org/10.1145/3765613.3811673","title":"ArchSnoop: LLM Architecture Snooping via Electromagnetic Side-Channel on Edge Devices","display_name":"ArchSnoop: LLM Architecture Snooping via Electromagnetic Side-Channel on Edge Devices","publication_year":2026,"publication_date":"2026-06-02","ids":{"openalex":"https://openalex.org/W7163187821","doi":"https://doi.org/10.1145/3765613.3811673"},"language":null,"primary_location":{"id":"doi:10.1145/3765613.3811673","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3765613.3811673","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3765613.3811673","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137621313","display_name":"Haozhe Weng","orcid":"https://orcid.org/0009-0002-2912-9302"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haozhe Weng","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0002-2912-9302","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001201289","display_name":"Ruochen Zhou","orcid":"https://orcid.org/0009-0006-4510-2571"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Ruochen Zhou","raw_affiliation_strings":["The Hong Kong University of Science and Technology, Clear Water Bay, Hong Kong"],"raw_orcid":"https://orcid.org/0009-0006-4510-2571","affiliations":[{"raw_affiliation_string":"The Hong Kong University of Science and Technology, Clear Water Bay, Hong Kong","institution_ids":["https://openalex.org/I200769079"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137689366","display_name":"Yubo Qu","orcid":"https://orcid.org/0009-0009-2034-5608"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yubo Qu","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0009-2034-5608","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137633768","display_name":"Xiaoyu Ji","orcid":"https://orcid.org/0000-0002-1101-0007"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoyu Ji","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-1101-0007","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037315703","display_name":"Wenying Xu","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenyuan Xu","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5043-9148","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.89858265,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"51","last_page":"62"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.6144999861717224,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.6144999861717224,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.22360000014305115,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.02329999953508377,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/eavesdropping","display_name":"Eavesdropping","score":0.6815000176429749},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.652400016784668},{"id":"https://openalex.org/keywords/edge-device","display_name":"Edge device","score":0.5250999927520752},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5205000042915344},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.5045999884605408},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.40799999237060547},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.38440001010894775},{"id":"https://openalex.org/keywords/edge-computing","display_name":"Edge computing","score":0.37959998846054077}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6952999830245972},{"id":"https://openalex.org/C2776788033","wikidata":"https://www.wikidata.org/wiki/Q320769","display_name":"Eavesdropping","level":2,"score":0.6815000176429749},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.652400016784668},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.5250999927520752},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5205000042915344},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.5045999884605408},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.40799999237060547},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.38440001010894775},{"id":"https://openalex.org/C2778456923","wikidata":"https://www.wikidata.org/wiki/Q5337692","display_name":"Edge computing","level":3,"score":0.37959998846054077},{"id":"https://openalex.org/C115051666","wikidata":"https://www.wikidata.org/wiki/Q6522493","display_name":"Ranging","level":2,"score":0.3781000077724457},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.3481000065803528},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.33629998564720154},{"id":"https://openalex.org/C193415008","wikidata":"https://www.wikidata.org/wiki/Q639681","display_name":"Network architecture","level":2,"score":0.30869999527931213},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.3068999946117401},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.2937000095844269},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.2797999978065491},{"id":"https://openalex.org/C49154492","wikidata":"https://www.wikidata.org/wiki/Q5300","display_name":"Central processing unit","level":2,"score":0.2754000127315521},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2712000012397766},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.26739999651908875},{"id":"https://openalex.org/C53619493","wikidata":"https://www.wikidata.org/wiki/Q4787093","display_name":"Architecture framework","level":3,"score":0.2651999890804291},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2563999891281128},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2556000053882599}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3765613.3811673","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3765613.3811673","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3765613.3811673","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3765613.3811673","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Conference on Security and Privacy in Wireless and Mobile Networks","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W2099302229","https://openalex.org/W3008983606","https://openalex.org/W3016623367","https://openalex.org/W3081274534","https://openalex.org/W3091214985","https://openalex.org/W3114482311","https://openalex.org/W3186456562","https://openalex.org/W4399396308","https://openalex.org/W4402288667","https://openalex.org/W4405242249","https://openalex.org/W4405794828","https://openalex.org/W4407900187"],"related_works":[],"abstract_inverted_index":{"The":[0],"rapid":[1],"development":[2],"of":[3,37],"large":[4],"language":[5],"models":[6],"(LLMs)":[7],"has":[8],"led":[9],"to":[10,104,115,188],"their":[11],"increasing":[12],"deployment":[13],"on":[14,76,126,163],"edge":[15,24,70,164,190],"devices":[16,165],"for":[17,150,166],"applications":[18],"such":[19,174],"as":[20,46,175],"autonomous":[21],"driving.":[22],"These":[23],"deployments":[25],"enable":[26],"efficient":[27],"localized":[28],"processing":[29],"while":[30],"enhancing":[31],"user":[32],"privacy.":[33],"However,":[34],"unintentional":[35],"leaks":[36],"model":[38,54,114,145],"families":[39],"and":[40,56,91,148,160,179],"hyperparameters":[41],"during":[42,94],"LLM":[43,71,161],"execution":[44],"serve":[45],"critical":[47],"attack":[48,74],"vectors,":[49],"facilitating":[50],"high-level":[51],"threats":[52],"like":[53],"extraction":[55],"membership":[57],"inference.":[58],"In":[59],"this":[60,182],"paper,":[61],"we":[62],"propose":[63],"ArchSnoop,":[64],"which":[65],"is":[66,83],"a":[67,110,185],"non":[68],"intrusive":[69],"architecture":[72,140],"eavesdropping":[73],"based":[75],"electromagnetic":[77],"(EM)":[78],"leakage.":[79],"Our":[80,124],"key":[81],"insight":[82],"that":[84,134],"the":[85,127,155,167],"EM":[86,122,158,177],"signals":[87,159],"emitted":[88],"by":[89],"GPU":[90],"memory":[92],"activities":[93],"inference":[95],"reflect":[96],"hierarchical":[97,112],"architectural":[98,118],"features":[99],"ranging":[100],"from":[101,120],"token":[102],"generation":[103],"individual":[105],"linear":[106],"projections.":[107],"We":[108,153],"designed":[109],"two-stage":[111],"reconstruction":[113],"recover":[116],"fine-grained":[117],"information":[119],"these":[121],"signals.":[123],"evaluation":[125],"NVIDIA":[128],"Jetson":[129],"Orin":[130],"Nano":[131],"platform":[132],"demonstrates":[133],"ArchSnoop":[135],"achieves":[136],"high":[137],"accuracy":[138],"in":[139,144],"reconstruction,":[141],"including":[142],"99.12%":[143],"family":[146],"classification":[147],"97.11%":[149],"hyperparameter":[151],"estimation.":[152],"reveal":[154],"mapping":[156],"between":[157],"architectures":[162],"first":[168],"time.":[169],"By":[170],"proposing":[171],"potential":[172],"countermeasures":[173],"physical":[176,194],"shielding":[178],"software-level":[180],"perturbations,":[181],"work":[183],"provides":[184],"new":[186],"dimension":[187],"secure":[189],"computing":[191],"platforms":[192],"against":[193],"threats.":[195]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-06-03T00:00:00"}