{"id":"https://openalex.org/W3120399985","doi":"https://doi.org/10.1587/transfun.2020cip0022","title":"Adversarial Black-Box Attacks with Timing Side-Channel Leakage","display_name":"Adversarial Black-Box Attacks with Timing Side-Channel Leakage","publication_year":2020,"publication_date":"2020-12-31","ids":{"openalex":"https://openalex.org/W3120399985","doi":"https://doi.org/10.1587/transfun.2020cip0022","mag":"3120399985"},"language":"en","primary_location":{"id":"doi:10.1587/transfun.2020cip0022","is_oa":false,"landing_page_url":"https://doi.org/10.1587/transfun.2020cip0022","pdf_url":null,"source":{"id":"https://openalex.org/S166990724","display_name":"IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences","issn_l":"0916-8508","issn":["0916-8508","1745-1337"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101126904","display_name":"Tsunato Nakai","orcid":null},"institutions":[{"id":"https://openalex.org/I4210159266","display_name":"Mitsubishi Electric (United States)","ror":"https://ror.org/053jnhe44","country_code":"US","type":"company","lineage":["https://openalex.org/I1306287861","https://openalex.org/I4210133125","https://openalex.org/I4210159266"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tsunato NAKAI","raw_affiliation_strings":["Mitsubishi Electric Corporation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mitsubishi Electric Corporation","institution_ids":["https://openalex.org/I4210159266"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010061828","display_name":"Daisuke Suzuki","orcid":"https://orcid.org/0000-0002-5843-9433"},"institutions":[{"id":"https://openalex.org/I4210159266","display_name":"Mitsubishi Electric (United States)","ror":"https://ror.org/053jnhe44","country_code":"US","type":"company","lineage":["https://openalex.org/I1306287861","https://openalex.org/I4210133125","https://openalex.org/I4210159266"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daisuke SUZUKI","raw_affiliation_strings":["Mitsubishi Electric Corporation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mitsubishi Electric Corporation","institution_ids":["https://openalex.org/I4210159266"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062828145","display_name":"Fumio Omatsu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210159266","display_name":"Mitsubishi Electric (United States)","ror":"https://ror.org/053jnhe44","country_code":"US","type":"company","lineage":["https://openalex.org/I1306287861","https://openalex.org/I4210133125","https://openalex.org/I4210159266"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fumio OMATSU","raw_affiliation_strings":["Mitsubishi Electric Corporation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mitsubishi Electric Corporation","institution_ids":["https://openalex.org/I4210159266"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007179822","display_name":"Takeshi Fujino","orcid":"https://orcid.org/0000-0001-9441-3137"},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takeshi FUJINO","raw_affiliation_strings":["Ritsumeikan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ritsumeikan University","institution_ids":["https://openalex.org/I135768898"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.1304,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.58079461,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"E104.A","issue":"1","first_page":"143","last_page":"151"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9559000134468079,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9302999973297119,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7282540798187256},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.6824889779090881},{"id":"https://openalex.org/keywords/masking","display_name":"Masking (illustration)","score":0.6322535276412964},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6289134621620178},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.5647104382514954},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5538858771324158},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5380996465682983},{"id":"https://openalex.org/keywords/channel","display_name":"Channel (broadcasting)","score":0.5331330299377441},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.43593740463256836},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4297184646129608},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.42033815383911133},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3823707103729248},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.33266282081604004},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3266373574733734},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2803707718849182},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1733379364013672},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.11764755845069885},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.09526360034942627}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7282540798187256},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.6824889779090881},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.6322535276412964},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6289134621620178},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.5647104382514954},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5538858771324158},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5380996465682983},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.5331330299377441},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.43593740463256836},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4297184646129608},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.42033815383911133},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3823707103729248},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.33266282081604004},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3266373574733734},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2803707718849182},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1733379364013672},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.11764755845069885},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.09526360034942627},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1587/transfun.2020cip0022","is_oa":false,"landing_page_url":"https://doi.org/10.1587/transfun.2020cip0022","pdf_url":null,"source":{"id":"https://openalex.org/S166990724","display_name":"IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences","issn_l":"0916-8508","issn":["0916-8508","1745-1337"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2051267297","https://openalex.org/W2408141691","https://openalex.org/W2461943168","https://openalex.org/W2516574342","https://openalex.org/W2572504188","https://openalex.org/W2745565856","https://openalex.org/W2798302089","https://openalex.org/W2802314446","https://openalex.org/W2805380858","https://openalex.org/W2809523935","https://openalex.org/W2887712657","https://openalex.org/W2895073576","https://openalex.org/W2898435086","https://openalex.org/W2901442710","https://openalex.org/W2906869444","https://openalex.org/W2915002466","https://openalex.org/W2951308087","https://openalex.org/W2962763344","https://openalex.org/W2965565691","https://openalex.org/W2990187689"],"related_works":["https://openalex.org/W2900215011","https://openalex.org/W2354319712","https://openalex.org/W2157150548","https://openalex.org/W2022533428","https://openalex.org/W2580249689","https://openalex.org/W2103519941","https://openalex.org/W2769734684","https://openalex.org/W2969678054","https://openalex.org/W1796231437","https://openalex.org/W2903787673"],"abstract_inverted_index":{"Artificial":[0],"intelligence":[1],"(AI),":[2],"especially":[3],"deep":[4,27],"learning":[5],"(DL),":[6],"has":[7],"been":[8],"remarkable":[9],"and":[10,64,90,129],"applied":[11],"to":[12,23,45,108,132,157],"various":[13],"industries.":[14],"However,":[15],"adversarial":[16],"examples":[17],"(AE),":[18],"which":[19,52,119,153],"add":[20],"small":[21],"perturbations":[22,97],"input":[24,109],"data":[25,110],"of":[26,56,87,94,126,134],"neural":[28],"networks":[29],"(DNNs)":[30],"for":[31,98],"misclassification,":[32],"are":[33,100],"attracting":[34],"attention.":[35],"In":[36,139],"this":[37],"paper,":[38],"we":[39],"propose":[40],"a":[41,82],"novel":[42],"black-box":[43,74,163],"attack":[44,80,147],"craft":[46],"AE":[47,99,122,160],"using":[48,59],"only":[49],"processing":[50,92,105],"time":[51,93,106],"is":[53],"side-channel":[54],"information":[55],"DNNs,":[57],"without":[58],"training":[60],"data,":[61],"model":[62],"architecture":[63],"parameters,":[65],"substitute":[66],"models":[67],"or":[68],"output":[69,77,155],"probability.":[70],"While,":[71],"several":[72,162],"existing":[73],"attacks":[75],"use":[76],"probability,":[78],"our":[79,112,120,146],"exploits":[81],"relationship":[83],"between":[84],"the":[85,91,103,124,135,141],"number":[86,125],"activated":[88,127],"nodes":[89,128],"DNNs.":[95],"The":[96],"decided":[101],"by":[102],"differential":[104],"according":[107],"in":[111,118],"attack.":[113],"We":[114],"show":[115],"experimental":[116,142],"results":[117,143],"attack's":[121],"increase":[123],"cause":[130],"misclassification":[131],"one":[133],"incorrect":[136],"labels":[137],"effectively.":[138],"addition,":[140],"highlight":[144],"that":[145],"can":[148],"evade":[149],"gradient":[150],"masking":[151],"countermeasures":[152],"mask":[154],"probability":[156],"prevent":[158],"crafting":[159],"against":[161],"attacks.":[164]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}