<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE ArticleSet PUBLIC "-//NLM//DTD PubMed 2.7//EN" "https://dtd.nlm.nih.gov/ncbi/pubmed/in/PubMed.dtd">
<ArticleSet>
<Article>
<Journal>
				<PublisherName>Iranian Society of Cryptology</PublisherName>
				<JournalTitle>The ISC International Journal of Information Security</JournalTitle>
				<Issn>2008-2045</Issn>
				<Volume></Volume>
				<Issue>Articles in Press</Issue>
				<PubDate PubStatus="epublish">
					<Year>2026</Year>
					<Month>02</Month>
					<Day>12</Day>
				</PubDate>
			</Journal>
<ArticleTitle>Securing Deep Learning Hardware: A Survey of Side-Channel Vulnerabilities and Countermeasures</ArticleTitle>
<VernacularTitle></VernacularTitle>
			<FirstPage></FirstPage>
			<LastPage></LastPage>
			<ELocationID EIdType="pii">240526</ELocationID>
			
<ELocationID EIdType="doi">10.22042/isecure.2026.240526</ELocationID>
			
			<Language>EN</Language>
<AuthorList>
<Author>
					<FirstName>Zahra</FirstName>
					<LastName>Mohammadi</LastName>
<Affiliation>School of Electrical and Computer Engineering, University of Tehran, Tehran, Iran.</Affiliation>

</Author>
<Author>
					<FirstName>Mona</FirstName>
					<LastName>Hashemi</LastName>
<Affiliation>School of Electrical and Computer Engineering, University of Tehran, Tehran, Iran.</Affiliation>

</Author>
<Author>
					<FirstName>Siamak</FirstName>
					<LastName>Mohammadi</LastName>
<Affiliation>School of Electrical and Computer Engineering, University of Tehran, Tehran, Iran.</Affiliation>

</Author>
</AuthorList>
				<PublicationType>Journal Article</PublicationType>
		<Abstract>As deep learning models are increasingly deployed in critical sectors such as healthcare, finance, and security, ensuring their protection against emerging threats has become crucial. Among these threats, side-channel attacks (SCAs) represent a particular challenge since they can extract sensitive information such as model architectures, parameters, and even user inputs without requiring direct access to the model. By leveraging the physical and micro-architectural properties of the hardware, attackers can compromise systems. This survey begins by classifying leakage sources and attacker objectives, then analyzes representative studies that demonstrate practical side-channel exploits against deep-learning hardware. It also reviews existing defenses aimed at mitigating these vulnerabilities and concludes by outlining key open research challenges and potential future directions.</Abstract>
		<ObjectList>
			<Object Type="keyword">
			<Param Name="value">Side-channel attacks</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Deep Learning Models</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Model Reverse Engineering</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Intellectual Property</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Side-Channel Protection</Param>
			</Object>
			<Object Type="keyword">
			<Param Name="value">Model Security</Param>
			</Object>
		</ObjectList>
<ArchiveCopySource DocType="pdf">https://www.isecure-journal.com/article_240526_687a60a4dfb950961cb3f875fac867bd.pdf</ArchiveCopySource>
</Article>
</ArticleSet>
