{"id":"https://openalex.org/W4323320181","doi":"https://doi.org/10.46586/tches.v2023.i2.587-613","title":"\u201cWhispering MLaaS\u201d","display_name":"\u201cWhispering MLaaS\u201d","publication_year":2023,"publication_date":"2023-03-06","ids":{"openalex":"https://openalex.org/W4323320181","doi":"https://doi.org/10.46586/tches.v2023.i2.587-613"},"language":"en","primary_location":{"id":"doi:10.46586/tches.v2023.i2.587-613","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2023.i2.587-613","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/10295/9745","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://tches.iacr.org/index.php/TCHES/article/download/10295/9745","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035190620","display_name":"Shubhi Shukla","orcid":"https://orcid.org/0000-0003-0452-885X"},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Shubhi Shukla","raw_affiliation_strings":["Indian Institute of Technology Kharagpur, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Kharagpur, India","institution_ids":["https://openalex.org/I145894827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053280523","display_name":"Manaar Alam","orcid":"https://orcid.org/0000-0002-3338-2944"},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Manaar Alam","raw_affiliation_strings":["New York University Abu Dhabi, UAE,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University Abu Dhabi, UAE,","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101816833","display_name":"Sarani Bhattacharya","orcid":"https://orcid.org/0000-0002-4190-2671"},"institutions":[{"id":"https://openalex.org/I4210114974","display_name":"IMEC","ror":"https://ror.org/02kcbn207","country_code":"BE","type":"nonprofit","lineage":["https://openalex.org/I4210114974"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Sarani Bhattacharya","raw_affiliation_strings":["IMEC Leuven, Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IMEC Leuven, Belgium","institution_ids":["https://openalex.org/I4210114974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032809289","display_name":"Pabitra Mitra","orcid":"https://orcid.org/0000-0002-1908-9813"},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Pabitra Mitra","raw_affiliation_strings":["Indian Institute of Technology Kharagpur, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Kharagpur, India","institution_ids":["https://openalex.org/I145894827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078971402","display_name":"Debdeep Mukhopadhyay","orcid":"https://orcid.org/0000-0002-6499-8346"},"institutions":[{"id":"https://openalex.org/I145894827","display_name":"Indian Institute of Technology Kharagpur","ror":"https://ror.org/03w5sq511","country_code":"IN","type":"education","lineage":["https://openalex.org/I145894827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Debdeep Mukhopadhyay","raw_affiliation_strings":["Indian Institute of Technology Kharagpur, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indian Institute of Technology Kharagpur, India","institution_ids":["https://openalex.org/I145894827"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.1104,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.80390366,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"587","last_page":"613"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.991100013256073,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9307000041007996,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7811593413352966},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.7735000252723694},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.7290244102478027},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.705817461013794},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.687143087387085},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.539897084236145},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.525652289390564},{"id":"https://openalex.org/keywords/popularity","display_name":"Popularity","score":0.46301552653312683},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.44382572174072266},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3735133409500122},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.24827101826667786},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.15711939334869385}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7811593413352966},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.7735000252723694},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.7290244102478027},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.705817461013794},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.687143087387085},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.539897084236145},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.525652289390564},{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.46301552653312683},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.44382572174072266},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3735133409500122},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.24827101826667786},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.15711939334869385},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.46586/tches.v2023.i2.587-613","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2023.i2.587-613","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/10295/9745","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:2acd25f6fade4f5a9fe73ef56fe03e72","is_oa":true,"landing_page_url":"https://doaj.org/article/2acd25f6fade4f5a9fe73ef56fe03e72","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Transactions on Cryptographic Hardware and Embedded Systems, Vol 2023, Iss 2 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.46586/tches.v2023.i2.587-613","is_oa":true,"landing_page_url":"https://doi.org/10.46586/tches.v2023.i2.587-613","pdf_url":"https://tches.iacr.org/index.php/TCHES/article/download/10295/9745","source":{"id":"https://openalex.org/S4210207404","display_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","issn_l":"2569-2925","issn":["2569-2925"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IACR Transactions on Cryptographic Hardware and Embedded Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6800000071525574}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321024","display_name":"Defence Research and Development Organisation","ror":"https://ror.org/05k37v296"},{"id":"https://openalex.org/F4320322724","display_name":"Ministry of Education, India","ror":"https://ror.org/048xjjh50"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4323320181.pdf"},"referenced_works_count":56,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W2101234009","https://openalex.org/W2133564696","https://openalex.org/W2163605009","https://openalex.org/W2194775991","https://openalex.org/W2279098554","https://openalex.org/W2294710185","https://openalex.org/W2435473771","https://openalex.org/W2473418344","https://openalex.org/W2511730936","https://openalex.org/W2535690855","https://openalex.org/W2603766943","https://openalex.org/W2618530766","https://openalex.org/W2773835648","https://openalex.org/W2789876780","https://openalex.org/W2789993878","https://openalex.org/W2809523935","https://openalex.org/W2887712657","https://openalex.org/W2895073576","https://openalex.org/W2901442710","https://openalex.org/W2906869444","https://openalex.org/W2912023992","https://openalex.org/W2930926105","https://openalex.org/W2931858311","https://openalex.org/W2951308087","https://openalex.org/W2953384591","https://openalex.org/W2963446712","https://openalex.org/W2963805462","https://openalex.org/W2965565691","https://openalex.org/W2970032385","https://openalex.org/W2981207549","https://openalex.org/W3005097289","https://openalex.org/W3008983606","https://openalex.org/W3028290818","https://openalex.org/W3045469364","https://openalex.org/W3045700442","https://openalex.org/W3046102592","https://openalex.org/W3046853140","https://openalex.org/W3049152512","https://openalex.org/W3086177986","https://openalex.org/W3104216513","https://openalex.org/W3114482311","https://openalex.org/W3118608800","https://openalex.org/W3134770507","https://openalex.org/W3170901302","https://openalex.org/W3180021682","https://openalex.org/W3183466684","https://openalex.org/W3197217216","https://openalex.org/W3203254411","https://openalex.org/W3213793813","https://openalex.org/W4246001895","https://openalex.org/W4280636339","https://openalex.org/W4286961857","https://openalex.org/W4286989576","https://openalex.org/W4295312788","https://openalex.org/W4376456917"],"related_works":["https://openalex.org/W3159882472","https://openalex.org/W3046286843","https://openalex.org/W4226318955","https://openalex.org/W4287865973","https://openalex.org/W3008951265","https://openalex.org/W39488540","https://openalex.org/W4221156855","https://openalex.org/W4311208498","https://openalex.org/W2768003418","https://openalex.org/W1481299995"],"abstract_inverted_index":{"While":[0],"recent":[1,171],"advancements":[2],"of":[3,18,41,126,147,183,203,210],"Deep":[4],"Learning":[5],"(DL)":[6],"in":[7,24,85,170,186],"solving":[8],"complex":[9],"real-world":[10],"tasks":[11],"have":[12,131],"spurred":[13],"their":[14,22],"popularity,":[15],"the":[16,38,47,59,124,144,162,201,207,222,234,243,247],"usage":[17],"privacy-rich":[19],"data":[20,156],"for":[21,34,58],"training":[23,161,208],"varied":[25],"applications":[26],"has":[27,45,157,167],"made":[28],"them":[29],"an":[30,105,117,148,230],"overly-exposed":[31],"threat":[32,48],"surface":[33,49],"privacy":[35,66,125],"violations.":[36],"Moreover,":[37],"rapid":[39],"adoption":[40],"cloud-based":[42],"Machine-Learning-asa-Service":[43],"(MLaaS)":[44],"broadened":[46],"to":[50,76,99,116,122,135,138,151,233],"various":[51],"remote":[52],"side-channel":[53,73],"attacks.":[54],"In":[55,194,226],"this":[56,75,96,195],"paper,":[57,196],"first":[60],"time,":[61],"we":[62,197,228],"show":[63],"one":[64],"such":[65],"violation":[67],"by":[68,192,236],"observing":[69],"a":[70,86,100,174,184,187,204,211],"data-dependent":[71],"timing":[72,97,224],"(naming":[74],"be":[77,136,190,219],"Class-Leakage)":[78],"originating":[79],"from":[80],"non-constant":[81],"time":[82],"branching":[83,239],"operation":[84,240],"widely":[87],"popular":[88,175],"DL":[89,129,212,252],"framework,":[90],"namely":[91],"PyTorch.":[92],"We":[93,245],"further":[94],"escalate":[95],"variability":[98],"practical":[101],"inference-time":[102],"attack":[103],"where":[104,143,179],"adversary":[106,149],"with":[107,215],"user":[108],"level":[109],"privileges":[110],"and":[111,181,263,273],"having":[112,270],"hard-label":[113],"black-box":[114],"access":[115],"MLaaS":[118,127],"can":[119,217],"exploit":[120],"Class-Leakage":[121],"compromise":[123],"users.":[128],"models":[130,253],"also":[132,198],"been":[133,158,168],"shown":[134],"vulnerable":[137],"Membership":[139],"Inference":[140],"Attack":[141],"(MIA),":[142],"primary":[145],"objective":[146],"is":[150],"deduce":[152],"whether":[153],"any":[154],"particular":[155],"used":[159],"while":[160],"model.":[163],"Differential":[164],"Privacy":[165],"(DP)":[166],"proposed":[169],"literature":[172],"as":[173],"countermeasure":[176,232],"against":[177],"MIA,":[178],"inclusivity":[180],"exclusivity":[182],"data-point":[185,205],"dataset":[188,209],"cannot":[189],"ascertained":[191],"definition.":[193],"demonstrate":[199],"that":[200,241],"existence":[202],"within":[206],"model":[213],"secured":[214],"DP":[216],"still":[218],"distinguished":[220],"using":[221,249],"identified":[223],"side-channel.":[225],"addition,":[227],"propose":[229],"efficient":[231],"problem":[235],"introducing":[237],"constant-time":[238],"alleviates":[242],"Class-Leakage.":[244],"validate":[246],"approach":[248],"five":[250],"pre-trained":[251],"trained":[254],"on":[255],"two":[256,266],"standard":[257],"benchmarking":[258],"image":[259],"classification":[260],"datasets,":[261],"CIFAR-10":[262],"CIFAR-100,":[264],"over":[265],"different":[267],"computing":[268],"environments":[269],"Intel":[271,274],"Xeon":[272],"i7":[275],"processors.":[276]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2023-03-07T00:00:00"}