{"id":"https://openalex.org/W3180021682","doi":"https://doi.org/10.46586/tches.v2021.i3.149-175","title":"Timing Black-Box Attacks: Crafting Adversarial Examples through Timing Leaks against DNNs on Embedded Devices","display_name":"Timing Black-Box Attacks: Crafting Adversarial Examples through Timing Leaks against DNNs on Embedded Devices","publication_year":2021,"publication_date":"2021-07-09","ids":{"openalex":"https://openalex.org/W3180021682","doi":"https://doi.org/10.46586/tches.v2021.i3.149-175","mag":"3180021682"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2021.i3.149-175","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2021.i3.149-175","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/8971/8549","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tches.iacr.org/index.php/TCHES/article/download/8971/8549","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101126904","display_name":"Tsunato Nakai","orcid":null},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]},{"id":"https://openalex.org/I4210133125","display_name":"Mitsubishi Electric (Japan)","ror":"https://ror.org/033y26782","country_code":"JP","type":"company","lineage":["https://openalex.org/I1306287861","https://openalex.org/I4210133125"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Tsunato Nakai","raw_affiliation_strings":["Mitsubishi Electric Corporation, Kamakura, Kanagawa, Japan; Ritsumeikan University, Kusatsu, Shiga, Japan","Mitsubishi Electric Corporation, Kamakura, Kanagawa, Japan","Ritsumeikan University, Kusatsu, Shiga, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mitsubishi Electric Corporation, Kamakura, Kanagawa, Japan; Ritsumeikan University, Kusatsu, Shiga, Japan","institution_ids":["https://openalex.org/I4210133125"]},{"raw_affiliation_string":"Mitsubishi Electric Corporation, Kamakura, Kanagawa, Japan","institution_ids":["https://openalex.org/I4210133125"]},{"raw_affiliation_string":"Ritsumeikan University, Kusatsu, Shiga, Japan","institution_ids":["https://openalex.org/I135768898"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029237569","display_name":"Daisuke Suzuki","orcid":"https://orcid.org/0000-0003-0444-156X"},"institutions":[{"id":"https://openalex.org/I4210133125","display_name":"Mitsubishi Electric (Japan)","ror":"https://ror.org/033y26782","country_code":"JP","type":"company","lineage":["https://openalex.org/I1306287861","https://openalex.org/I4210133125"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Daisuke Suzuki","raw_affiliation_strings":["Mitsubishi Electric Corporation, Kamakura, Kanagawa, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mitsubishi Electric Corporation, Kamakura, Kanagawa, Japan","institution_ids":["https://openalex.org/I4210133125"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007179822","display_name":"Takeshi Fujino","orcid":"https://orcid.org/0000-0001-9441-3137"},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takeshi Fujino","raw_affiliation_strings":["Ritsumeikan University, Kusatsu, Shiga, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ritsumeikan University, Kusatsu, Shiga, Japan","institution_ids":["https://openalex.org/I135768898"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6507,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.75483973,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"149","last_page":"175"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12495","display_name":"Electrostatic Discharge in Electronics","score":0.9919999837875366,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9887999892234802,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7755417823791504},{"id":"https://openalex.org/keywords/masking","display_name":"Masking (illustration)","score":0.5161755681037903},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5090958476066589},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.48474666476249695},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.40119901299476624},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3256396949291229},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.27748578786849976},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.18957850337028503}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7755417823791504},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.5161755681037903},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5090958476066589},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.48474666476249695},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.40119901299476624},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3256396949291229},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27748578786849976},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.18957850337028503},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tches.v2021.i3.149-175","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2021.i3.149-175","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/8971/8549","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:f7c1a073befe4d56ad843a03ddd4092b","is_oa":true,"landing_page_url":"https://doaj.org/article/f7c1a073befe4d56ad843a03ddd4092b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2021, Iss 3 (2021)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tches.v2021.i3.149-175","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2021.i3.149-175","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/8971/8549","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2247015924","display_name":null,"funder_award_id":"JPMJMI19B6","funder_id":"https://openalex.org/F4320338243","funder_display_name":"JST-Mirai Program"}],"funders":[{"id":"https://openalex.org/F4320338243","display_name":"JST-Mirai Program","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3180021682.pdf","grobid_xml":"https://content.openalex.org/works/W3180021682.grobid-xml"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W1613874182","https://openalex.org/W1673923490","https://openalex.org/W1945616565","https://openalex.org/W2051267297","https://openalex.org/W2154909745","https://openalex.org/W2408141691","https://openalex.org/W2460937040","https://openalex.org/W2461943168","https://openalex.org/W2516574342","https://openalex.org/W2572504188","https://openalex.org/W2606722458","https://openalex.org/W2744095836","https://openalex.org/W2745565856","https://openalex.org/W2785681938","https://openalex.org/W2794878842","https://openalex.org/W2798302089","https://openalex.org/W2805380858","https://openalex.org/W2809523935","https://openalex.org/W2874797877","https://openalex.org/W2887712657","https://openalex.org/W2893554781","https://openalex.org/W2895073576","https://openalex.org/W2898435086","https://openalex.org/W2901442710","https://openalex.org/W2906869444","https://openalex.org/W2909159593","https://openalex.org/W2915002466","https://openalex.org/W2950782995","https://openalex.org/W2951308087","https://openalex.org/W2953212265","https://openalex.org/W2962763344","https://openalex.org/W2963857521","https://openalex.org/W2964346747","https://openalex.org/W2965565691","https://openalex.org/W2982669769","https://openalex.org/W2990077704","https://openalex.org/W2990887689","https://openalex.org/W3004923694","https://openalex.org/W3049152512","https://openalex.org/W3118164462","https://openalex.org/W4246001895","https://openalex.org/W4293874330","https://openalex.org/W4300511536","https://openalex.org/W4394644156"],"related_works":["https://openalex.org/W17155033","https://openalex.org/W3207760230","https://openalex.org/W1496222301","https://openalex.org/W1590307681","https://openalex.org/W2536018345","https://openalex.org/W4312814274","https://openalex.org/W4285370786","https://openalex.org/W2296488620","https://openalex.org/W2358353312","https://openalex.org/W2353836703"],"abstract_inverted_index":{"Deep":[0],"neural":[1],"networks":[2],"(DNNs)":[3],"have":[4,16],"been":[5],"applied":[6],"to":[7,37,43,49,60,192,212],"various":[8],"industries.":[9],"In":[10,51],"particular,":[11],"DNNs":[12,42,73,131,168],"on":[13,27,65,74,125,169],"embedded":[14,75],"devices":[15],"attracted":[17],"considerable":[18],"interest":[19],"because":[20],"they":[21],"allow":[22],"real-time":[23],"and":[24,98,157,183,210],"distributed":[25],"processing":[26,66,99,122],"site.":[28],"However,":[29],"adversarial":[30],"examples":[31],"(AEs),":[32],"which":[33,187],"add":[34],"small":[35],"perturbations":[36,114],"the":[38,69,86,90,93,120,126,130,133,141,144,152,158,163,167,178,189,194,203,206,215,226,229],"input":[39,127],"data":[40,128],"of":[41,95,129,143,154,160,162,196,217,228],"cause":[44,148,227],"misclassification,":[45],"are":[46,117,208],"serious":[47],"threats":[48],"DNNs.":[50],"this":[52],"paper,":[53],"a":[54,170],"novel":[55],"black-box":[56,80,200],"attack":[57,88,146,179,207],"is":[58,225],"proposed":[59,87,134,145,230],"craft":[61],"AEs":[62,116,142,197],"based":[63,124],"only":[64],"time,":[67],"i.e.,":[68],"side-channel":[70],"leaks":[71,224],"from":[72],"devices.":[76],"Unlike":[77],"several":[78,199],"existing":[79],"attacks":[81],"that":[82,140,177,214],"utilize":[83],"output":[84,111,190],"probability,":[85,191],"exploits":[89],"relationship":[91],"between":[92],"number":[94,153],"activated":[96,155],"nodes":[97,156],"time":[100,123],"without":[101],"using":[102],"training":[103],"data,":[104],"model":[105],"architecture,":[106],"parameters,":[107],"substitute":[108],"models,":[109],"or":[110],"probability.":[112],"The":[113,136],"for":[115],"determined":[118],"by":[119],"differential":[121],"in":[132,151],"attack.":[135,231],"experimental":[137],"results":[138,175],"show":[139],"effectively":[147],"an":[149,218],"increase":[150],"misclassification":[159],"one":[161],"incorrect":[164],"labels":[165],"against":[166,198,205],"microcontroller":[171],"unit.":[172],"Moreover,":[173],"these":[174],"indicate":[176],"can":[180],"evade":[181],"gradient-masking":[182],"confidence":[184],"reduction":[185],"countermeasures,":[186],"conceal":[188],"prevent":[193],"crafting":[195],"attacks.":[201],"Finally,":[202],"countermeasures":[204],"implemented":[209],"evaluated":[211],"clarify":[213],"implementation":[216],"activation":[219],"function":[220],"with":[221],"data-dependent":[222],"timing":[223]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}