{"id":"https://openalex.org/W4404134044","doi":"https://doi.org/10.1145/3649329.3657388","title":"Architectural Whispers: Robust Machine Learning Models Fingerprinting via Frequency Throttling Side-Channels","display_name":"Architectural Whispers: Robust Machine Learning Models Fingerprinting via Frequency Throttling Side-Channels","publication_year":2024,"publication_date":"2024-06-23","ids":{"openalex":"https://openalex.org/W4404134044","doi":"https://doi.org/10.1145/3649329.3657388"},"language":"en","primary_location":{"id":"doi:10.1145/3649329.3657388","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649329.3657388","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 61st ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3649329.3657388","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052073496","display_name":"Najmeh Nazari","orcid":"https://orcid.org/0000-0003-3094-9439"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Najmeh Nazari","raw_affiliation_strings":["ECE Dept, University of California, Davis, Davis, CA, United States"],"affiliations":[{"raw_affiliation_string":"ECE Dept, University of California, Davis, Davis, CA, United States","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103170368","display_name":"Chongzhou Fang","orcid":"https://orcid.org/0009-0008-7208-1985"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chongzhou Fang","raw_affiliation_strings":["ECE Dept, University of California, Davis, Davis, CA, United States"],"affiliations":[{"raw_affiliation_string":"ECE Dept, University of California, Davis, Davis, CA, United States","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044003457","display_name":"Hosein Mohammadi Makrani","orcid":"https://orcid.org/0000-0002-5088-8728"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hosein Mohammadi Makrani","raw_affiliation_strings":["ECE Dept, University of California, Davis, Davis, CA, United States"],"affiliations":[{"raw_affiliation_string":"ECE Dept, University of California, Davis, Davis, CA, United States","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020321835","display_name":"Behnam Omidi","orcid":"https://orcid.org/0000-0002-6724-2093"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Behnam Omidi","raw_affiliation_strings":["ECE Dept, George Mason University, Fairfax, VA, United States"],"affiliations":[{"raw_affiliation_string":"ECE Dept, George Mason University, Fairfax, VA, United States","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043629858","display_name":"Mahdi Eslamimehr","orcid":"https://orcid.org/0000-0002-0188-5061"},"institutions":[{"id":"https://openalex.org/I2799798094","display_name":"UCLA Health","ror":"https://ror.org/01d88se56","country_code":"US","type":"funder","lineage":["https://openalex.org/I2799798094"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mahdi Eslamimehr","raw_affiliation_strings":["UCLA, LA, CA, United States"],"affiliations":[{"raw_affiliation_string":"UCLA, LA, CA, United States","institution_ids":["https://openalex.org/I2799798094"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103033046","display_name":"Setareh Rafatirad","orcid":"https://orcid.org/0000-0003-2035-8512"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Setareh Rafatirad","raw_affiliation_strings":["University of California Davis, Davis, --, United States"],"affiliations":[{"raw_affiliation_string":"University of California Davis, Davis, --, United States","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060036961","display_name":"Avesta Sasan","orcid":"https://orcid.org/0000-0002-4052-8075"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Avesta Sasan","raw_affiliation_strings":["UC Davis, Davis, CA, United States"],"affiliations":[{"raw_affiliation_string":"UC Davis, Davis, CA, United States","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080844858","display_name":"Hossein Sayadi","orcid":"https://orcid.org/0000-0001-6423-0145"},"institutions":[{"id":"https://openalex.org/I59897056","display_name":"California State University, Long Beach","ror":"https://ror.org/0080fxk18","country_code":"US","type":"education","lineage":["https://openalex.org/I59897056"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hossein Sayadi","raw_affiliation_strings":["California State University, Long Beach, Long Beach, CA, United States"],"affiliations":[{"raw_affiliation_string":"California State University, Long Beach, Long Beach, CA, United States","institution_ids":["https://openalex.org/I59897056"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037831461","display_name":"Khaled N. Khasawneh","orcid":"https://orcid.org/0000-0002-2116-2223"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Khaled N. Khasawneh","raw_affiliation_strings":["George Mason University, Fairfax, VA, United States"],"affiliations":[{"raw_affiliation_string":"George Mason University, Fairfax, VA, United States","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047382437","display_name":"Houman Homayoun","orcid":"https://orcid.org/0000-0001-8904-4699"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Houman Homayoun","raw_affiliation_strings":["University of California Davis, Davis, CA, United States"],"affiliations":[{"raw_affiliation_string":"University of California Davis, Davis, CA, United States","institution_ids":["https://openalex.org/I84218800"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":10,"corresponding_author_ids":["https://openalex.org/A5052073496"],"corresponding_institution_ids":["https://openalex.org/I84218800"],"apc_list":null,"apc_paid":null,"fwci":0.7873,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.74182701,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/bandwidth-throttling","display_name":"Bandwidth throttling","score":0.8465173244476318},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6560383439064026},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3555753529071808},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.19343197345733643},{"id":"https://openalex.org/keywords/aerospace-engineering","display_name":"Aerospace engineering","score":0.11472165584564209}],"concepts":[{"id":"https://openalex.org/C173061102","wikidata":"https://www.wikidata.org/wiki/Q478819","display_name":"Bandwidth throttling","level":3,"score":0.8465173244476318},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6560383439064026},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3555753529071808},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.19343197345733643},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.11472165584564209},{"id":"https://openalex.org/C131097465","wikidata":"https://www.wikidata.org/wiki/Q178898","display_name":"Gas compressor","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3649329.3657388","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649329.3657388","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 61st ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3649329.3657388","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3649329.3657388","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 61st ACM/IEEE Design Automation Conference","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Affordable and clean energy","score":0.4099999964237213,"id":"https://metadata.un.org/sdg/7"}],"awards":[{"id":"https://openalex.org/G3063135679","display_name":null,"funder_award_id":"CNS-2155002","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6590715681","display_name":null,"funder_award_id":"CNS-2155029","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2752929869","https://openalex.org/W2963805462","https://openalex.org/W2982438846","https://openalex.org/W2987241895","https://openalex.org/W3007037833","https://openalex.org/W3008983606","https://openalex.org/W3042807565","https://openalex.org/W3046853140","https://openalex.org/W4282968709","https://openalex.org/W4283390025","https://openalex.org/W4313172341"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2393348554","https://openalex.org/W2349133582","https://openalex.org/W2010203168","https://openalex.org/W3151308896","https://openalex.org/W2015072665","https://openalex.org/W2069213387","https://openalex.org/W2377698884"],"abstract_inverted_index":{"Machine":[0],"Learning":[1],"(ML)":[2],"security":[3],"practices":[4],"include":[5],"hiding":[6],"ML":[7,32,54,76],"model":[8,65],"architectures":[9],"to":[10,29,56,70],"protect":[11],"intellectual":[12],"property":[13],"and":[14,50,84],"prevent":[15],"attacks.":[16],"We":[17,67],"introduce":[18],"a":[19,51],"novel":[20],"fingerprinting":[21],"attack":[22],"using":[23,47],"frequency":[24],"throttling-based":[25],"Side-Channel":[26],"Attack":[27],"(SCA)":[28],"detect":[30],"an":[31],"model's":[33],"architecture":[34,59,78],"family":[35],"by":[36],"converting":[37],"power":[38],"side-channel":[39],"data":[40],"into":[41],"timing":[42],"variations.":[43],"This":[44],"method":[45],"involves":[46],"adversary":[48],"kernels":[49],"time":[52,62],"series":[53],"classifier":[55],"discern":[57],"the":[58],"from":[60],"execution":[61],"patterns":[63],"during":[64],"operation.":[66],"achieved":[68],"up":[69],"96%":[71],"accuracy":[72],"in":[73],"identifying":[74],"known":[75],"models'":[77],"families":[79],"under":[80],"Ring":[81],"0":[82],"privileges":[83],"we":[85],"demonstrated":[86],"its":[87],"effectiveness":[88],"across":[89],"different":[90],"platforms.":[91],"Moreover,":[92],"our":[93],"code":[94],"is":[95],"publicly":[96],"available":[97],"1.":[98]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2025-12-21T01:58:51.020947","created_date":"2025-10-10T00:00:00"}