CMP-PIM: an energy-efficient comparator-based processing-in-memory neural network accelerator. - Shaahin Angizi; Zhezhi He; Adnan Siraj Rakin; Deliang Fan (DAC, 2018)

PIM-TGAN: A Processing-in-Memory Accelerator for Ternary Generative Adversarial Networks. - Adnan Siraj Rakin; Shaahin Angizi; Zhezhi He; Deliang Fan (ICCD, 2018)

BD-NET: A Multiplication-Less DNN with Binarized Depthwise Separable Convolution. - Zhezhi He; Shaahin Angizi; Adnan Siraj Rakin; Deliang Fan (ISVLSI, 2018)

Blind Pre-Processing: A Robust Defense Method Against Adversarial Examples. - Adnan Siraj Rakin; Zhezhi He; Boqing Gong; Deliang Fan (CoRR, 2018)

Defend Deep Neural Networks Against Adversarial Examples via Fixed andDynamic Quantized Activation Functions. - Adnan Siraj Rakin; Jinfeng Yi; Boqing Gong; Deliang Fan (CoRR, 2018)

Parametric Noise Injection: Trainable Randomness to Improve Deep Neural Network Robustness Against Adversarial Attack. - Zhezhi He; Adnan Siraj Rakin; Deliang Fan (CVPR, 2019)

Bit-Flip Attack: Crushing Neural Network With Progressive Bit Search. - Adnan Siraj Rakin; Zhezhi He; Deliang Fan (ICCV, 2019)

Defense-Net: Defend Against a Wide Range of Adversarial Attacks through Adversarial Detector. - Adnan Siraj Rakin; Deliang Fan (ISVLSI, 2019)

Bit-Flip Attack: Crushing Neural Network withProgressive Bit Search. - Adnan Siraj Rakin; Zhezhi He; Deliang Fan (CoRR, 2019)

Robust Sparse Regularization: Simultaneously Optimizing Neural Network Robustness and Compactness. - Adnan Siraj Rakin; Zhezhi He; Li Yang 009; Yanzhi Wang; Liqiang Wang 001; Deliang Fan (CoRR, 2019)

Defending and Harnessing the Bit-Flip Based Adversarial Weight Attack. - Zhezhi He; Adnan Siraj Rakin; Jingtao Li; Chaitali Chakrabarti; Deliang Fan (CVPR, 2020)

TBT: Targeted Neural Network Attack With Bit Trojan. - Adnan Siraj Rakin; Zhezhi He; Deliang Fan (CVPR, 2020)

Defending Bit-Flip Attack through DNN Weight Reconstruction. - Jingtao Li; Adnan Siraj Rakin; Yan Xiong 002; Liangliang Chang; Zhezhi He; Deliang Fan; Chaitali Chakrabarti (DAC, 2020)

Robust Sparse Regularization: Defending Adversarial Attacks Via Regularized Sparse Network. - Adnan Siraj Rakin; Zhezhi He; Li Yang 009; Yanzhi Wang; Liqiang Wang 001; Deliang Fan (ACM Great Lakes Symposium on VLSI, 2020)

DeepHammer: Depleting the Intelligence of Deep Neural Networks through Targeted Chain of Bit Flips. - Fan Yao; Adnan Siraj Rakin; Deliang Fan (USENIX Security Symposium, 2020)

DA2: Deep Attention Adapter for Memory-EfficientOn-Device Multi-Domain Learning. - Li Yang 009; Adnan Siraj Rakin; Deliang Fan (CoRR, 2020)

Sparse BD-Net: A Multiplication-less DNN with Sparse Binarized Depth-wise Separable Convolution. - Zhezhi He; Li Yang 009; Shaahin Angizi; Adnan Siraj Rakin; Deliang Fan (ACM J. Emerg. Technol. Comput. Syst., 2020)

Leveraging Noise and Aggressive Quantization of In-Memory Computing for Robust DNN Hardware Against Adversarial Input and Weight Attacks. - Sai Kiran Cherupally; Adnan Siraj Rakin; Shihui Yin; Mingoo Seok; Deliang Fan; Jae-sun Seo (DAC, 2021)

RADAR: Run-time Adversarial Weight Attack Detection and Accuracy Recovery. - Jingtao Li; Adnan Siraj Rakin; Zhezhi He; Deliang Fan; Chaitali Chakrabarti (DATE, 2021)

NeurObfuscator: A Full-stack Obfuscation Tool to Mitigate Neural Architecture Stealing. - Jingtao Li; Zhezhi He; Adnan Siraj Rakin; Deliang Fan; Chaitali Chakrabarti (HOST, 2021)

Robust Machine Learning via Privacy/ Rate-Distortion Theory. - Ye Wang 001; Shuchin Aeron; Adnan Siraj Rakin; Toshiaki Koike-Akino; Pierre Moulin (ISIT, 2021)

Towards Universal Adversarial Examples and Defenses. - Adnan Siraj Rakin; Ye Wang 001; Shuchin Aeron; Toshiaki Koike-Akino; Pierre Moulin; Kieran Parsons (ITW, 2021)

Deep-Dup: An Adversarial Weight Duplication Attack Framework to Crush Deep Neural Network in Multi-Tenant FPGA. - Adnan Siraj Rakin; Yukui Luo; Xiaolin Xu 001; Deliang Fan (USENIX Security Symposium, 2021)

RA-BNN: Constructing Robust & Accurate Binary Neural Network to Simultaneously Defend Adversarial Bit-Flip Attack and Improve Accuracy. - Adnan Siraj Rakin; Li Yang 009; Jingtao Li; Fan Yao; Chaitali Chakrabarti; Yu Cao 001; Jae-sun Seo; Deliang Fan (CoRR, 2021)

ResSFL: A Resistance Transfer Framework for Defending Model Inversion Attack in Split Federated Learning. - Jingtao Li; Adnan Siraj Rakin; Xing Chen 009; Zhezhi He; Deliang Fan; Chaitali Chakrabarti (CVPR, 2022)

DA3: Dynamic Additive Attention Adaption for Memory-Efficient On-Device Multi-Domain Learning. - Li Yang 009; Adnan Siraj Rakin; Deliang Fan (CVPR Workshops, 2022)

RepNet: Efficient On-Device Learning via Feature Reprogramming. - Li Yang 009; Adnan Siraj Rakin; Deliang Fan (CVPR, 2022)

DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories. - Adnan Siraj Rakin; Md Hafizul Islam Chowdhuryy; Fan Yao; Deliang Fan (SP, 2022)

Improving DNN Hardware Accuracy by In-Memory Computing Noise Injection. - Sai Kiran Cherupally; Jian Meng; Adnan Siraj Rakin; Shihui Yin; Mingoo Seok; Deliang Fan; Jae-Sun Seo (IEEE Des. Test, 2022)

T-BFA: Targeted Bit-Flip Adversarial Weight Attack. - Adnan Siraj Rakin; Zhezhi He; Jingtao Li; Fan Yao; Chaitali Chakrabarti; Deliang Fan (IEEE Trans. Pattern Anal. Mach. Intell., 2022)

SSDA: Secure Source-Free Domain Adaptation. - Sabbir Ahmed; Abdullah Al Arafat; Mamshad Nayeem Rizve; Rahim Hossain; Zhishan Guo; Adnan Siraj Rakin (ICCV, 2023)

Model Extraction Attacks on Split Federated Learning. - Jingtao Li; Adnan Siraj Rakin; Xing Chen 009; Li Yang 009; Zhezhi He; Deliang Fan; Chaitali Chakrabarti (CoRR, 2023)

DNN-Defender: An in-DRAM Deep Neural Network Defense Mechanism for Adversarial Weight Attack. - Ranyang Zhou; Sabbir Ahmed; Adnan Siraj Rakin; Shaahin Angizi (CoRR, 2023)

Threshold Breaker: Can Counter-Based RowHammer Prevention Mechanisms Truly Safeguard DRAM? - Ranyang Zhou; Jacqueline T. Liu; Sabbir Ahmed; Nakul Kochar; Adnan Siraj Rakin; Shaahin Angizi (CoRR, 2023)

EMGAN: Early-Mix-GAN on Extracting Server-Side Model in Split Federated Learning. - Jingtao Li; Xing Chen 009; Li Yang 009; Adnan Siraj Rakin; Deliang Fan; Chaitali Chakrabarti (AAAI, 2024)

Fisher Information guided Purification against Backdoor Attacks. - Nazmul Karim; Abdullah Al Arafat; Adnan Siraj Rakin; Zhishan Guo; Nazanin Rahnavard (CCS, 2024)

Deep-TROJ: An Inference Stage Trojan Insertion Algorithm Through Efficient Weight Replacement Attack. - Sabbir Ahmed; Ranyang Zhou; Shaahin Angizi; Adnan Siraj Rakin (CVPR, 2024)

DNN-Defender: A Victim-Focused In-DRAM Defense Mechanism for Taming Adversarial Weight Attack on DNNs. - Ranyang Zhou; Sabbir Ahmed; Adnan Siraj Rakin; Shaahin Angizi (DAC, 2024)

DRAM-Locker: A General-Purpose DRAM Protection Mechanism Against Adversarial DNN Weight Attacks. - Ranyang Zhou; Sabbir Ahmed; Arman Roohi; Adnan Siraj Rakin; Shaahin Angizi (DATE, 2024)

DeepShuffle: A Lightweight Defense Framework against Adversarial Fault Injection Attacks on Deep Neural Networks in Multi-Tenant Cloud-FPGA. - Yukui Luo; Adnan Siraj Rakin; Deliang Fan; Xiaolin Xu 001 (SP, 2024)

DRAM-Profiler: An Experimental DRAM RowHammer Vulnerability Profiling Mechanism. - Ranyang Zhou; Jacqueline T. Liu; Nakul Kochar; Sabbir Ahmed; Adnan Siraj Rakin; Shaahin Angizi (CoRR, 2024)

A Novel Insight Into the Vulnerability of DDR4 DRAM Cells Across Multiple Hammering Settings. - Ranyang Zhou; Jacqueline T. Liu; Nakul Kochar; Sabbir Ahmed; Adnan Siraj Rakin; Shaahin Angizi (IEEE Embed. Syst. Lett., 2024)

DeepCompress-ViT: Rethinking Model Compression to Enhance Efficiency of Vision Transformers at the Edge. - Sabbir Ahmed; Abdullah Al Arafat; Deniz Najafi; Akhlak Mahmood; Mamshad Nayeem Rizve; Mohaiminul Al Nahian; Ranyang Zhou; Shaahin Angizi; Adnan Siraj Rakin (CVPR, 2025)

Compromising the Intelligence of Modern DNNs: On the Effectiveness of Targeted RowPress. - Ranyang Zhou; Jacqueline T. Liu; Sabbir Ahmed; Shaahin Angizi; Adnan Siraj Rakin (DATE, 2025)

How Vulnerable are Large Language Models (LLMs) against Adversarial Bit-Flip Attacks? - Abeer Matar A Almalky; Ranyang Zhou; Shaahin Angizi; Adnan Siraj Rakin (ACM Great Lakes Symposium on VLSI, 2025)

Robo-Troj: Attacking LLM-based Task Planners. - Mohaiminul Al Nahian; Zainab Altaweel; David Reitano; Sabbir Ahmed; Saumitra Lohokare; Shiqi Zhang; Adnan Siraj Rakin (CoRR, 2025)

Assessing the Potential of Escalating RowHammer Attack Distance to Bypass-Counter-Based Defenses. - Ranyang Zhou; Jacqueline T. Liu; Sabbir Ahmed; Nakul Kochar; Adnan Siraj Rakin; Shaahin Angizi (IEEE Trans. Comput. Aided Des. Integr. Circuits Syst., 2025)

Unified Alignment Protocol: Making Sense of the Unlabeled Data in New Domains. - Sabbir Ahmed; Mamshad Nayeem Rizve; Abdullah Al Arafat; Jacqueline T. Liu; Rahim Hossain; Mohaiminul Al Nahian; Adnan Siraj Rakin (CoRR, 2025)

EIM-TRNG: Obfuscating Deep Neural Network Weights with Encoding-in-Memory True Random Number Generator via RowHammer. - Ranyang Zhou; Abeer Matar A Almalky; Gamana Aragonda; Sabbir Ahmed; Filip Roth Trønnes-Christensen; Adnan Siraj Rakin; Shaahin Angizi (CoRR, 2025)