bluuebunny/crossref_metadata_2025_split huggingface dataset:
Maximizing CNN Accelerator Efficiency Through Resource Partitioning
Authors: Shen Yongming , Ferdman Michael , Milder Peter 
Published: September 2017

Convolutional neural networks (CNNs) are revolutionizing machine learning, but they present significant computational challenges. Recently, many FPGA-based accelerators have been proposed to improve the performance and efficiency of CNNs. Current approaches construct a single processor that computes the CNN layers one at a time; the processor is optimized to maximize the throughput at which the collection of layers is computed. However, this approach leads to inefficient designs because the same processor structure is used to compute CNN layers of radically varying dimensions.
We present a new CNN accelerator paradigm and an accompanying automated design methodology that partitions the available FPGA resources into multiple processors, each of which is tailored for a different subset of the CNN convolutional layers. Using the same FPGA resources as a single large processor, multiple smaller specialized processors increase computational efficiency and lead to a higher overall throughput. Our design methodology achieves 3.8x higher throughput than the state-of-the-art approach on evaluating the popular AlexNet CNN on a Xilinx Virtex-7 FPGA. For the more recent SqueezeNet and GoogLeNet, the speedups are 2.2x and 2.0x.
Secure Hierarchy-Aware Cache Replacement Policy (SHARP)
Authors: Yan Mengjia , Gopireddy Bhargava , Shull Thomas , Torrellas Josep 
Published: September 2017

In cache-based side channel attacks, a spy that shares a cache with a victim probes cache locations to extract information on the victim's access patterns. For example, in evict+reload, the spy repeatedly evicts and then reloads a probe address, checking if the victim has accessed the address in between the two operations. While there are many proposals to combat these cache attacks, they all have limitations: they either hurt performance, require programmer intervention, or can only defend against some types of attacks.
This paper makes the following observation for an environment with an inclusive cache hierarchy: when the spy evicts the probe address from the shared cache, the address will also be evicted from the private cache of the victim process, creating an inclusion victim. Consequently, to disable cache attacks, this paper proposes to alter the line replacement algorithm of the shared cache, to prevent a process from creating inclusion victims in the caches of cores running other processes. By enforcing this rule, the spy cannot evict the probe address from the shared cache and, hence, cannot glimpse any information on the victim's access patterns. We call our proposal SHARP (Secure Hierarchy-Aware cache Replacement Policy). SHARP efficiently defends against all existing cross-core shared-cache attacks, needs only minimal hardware modifications, and requires no code modifications. We implement SHARP in a cycle-level full-system simulator. We show that it protects against real-world attacks, and that it introduces negligible average performance degradation.
MeRLiN
Authors: Kaliorakis Manolis , Gizopoulos Dimitris , Canal Ramon , Gonzalez Antonio 
Published: September 2017

Early reliability assessment of hardware structures using microarchitecture level simulators can effectively guide major error protection decisions in microprocessor design. Statistical fault injection on microarchitectural structures modeled in performance simulators is an accurate method to measure their Architectural Vulnerability Factor (AVF) but requires excessively long campaigns to obtain high statistical significance.
We propose MeRLiN1, a methodology to boost microarchitecture level injection-based reliability assessment by several orders of magnitude and keep the accuracy of the assessment unaffected even for large injection campaigns with very high statistical significance. The core of MeRLiN is the grouping of faults of an initial list in equivalent classes. All faults in the same group target equivalent vulnerable intervals of program execution ending up to the same static instruction that reads the faulty entries. Faults in the same group occur in different times and entries of a structure and it is extremely likely that they all have the same effect in program execution; thus, fault injection is performed only on a few representatives from each group.
We evaluate MeRLiN for different sizes of the physical register file, the store queue and the first level data cache of a contemporary microarchitecture running MiBench and SPEC CPU2006 benchmarks. For all our experiments, MeRLiN is from 2 to 3 orders of magnitude faster than an extremely high statistical significant injection campaign, reporting the same reliability measurements with negligible loss of accuracy. Finally, we theoretically analyze MeRLiN's statistical behavior to further justify its accuracy.
Lemonade from Lemons
Authors: Deng Zhaoxia , Feldman Ariel , Kurtz Stuart A. , Chong Frederic T. 
Published: September 2017

Most architectures are designed to mitigate the usually undesirable phenomenon of device wearout. We take a contrarian view and harness this phenomenon to create hardware security mechanisms that resist attacks by statistically enforcing an upper bound on hardware uses, and consequently attacks. For example, let us assume that a user may log into a smartphone a maximum of 50 times a day for 5 years, resulting in approximately 91,250 legitimate uses. If we assume at least 8-character passwords and we require login (and retrieval of the storage decryption key) to traverse hardware that wears out in 91,250 uses, then an adversary has a negligible chance of successful brute-force attack before the hardware wears out, even assuming real-world password cracking by professionals. M-way replication of our hardware and periodic re-encryption of storage can increase the daily usage bound by a factor of M.
The key challenge is to achieve practical statistical bounds on both minimum and maximum uses for an architecture, given that individual devices can vary widely in wearout characteristics. We introduce techniques for architecturally controlling these bounds and perform a design space exploration for three use cases: a limited-use connection, a limited-use targeting system and one-time pads. These techniques include decision trees, parallel structures, Shamir's secret-sharing mechanism, Reed-Solomon codes, and module replication. We explore the cost in area, energy and latency of using these techniques to achieve system-level usage targets given device-level wearout distributions. With redundant encoding, for example, we can improve exponential sensitivity to device lifetime variation to linear sensitivity, reducing the total number of NEMS devices by 4 orders of magnitude to about 0.8 million for limited-use connections (compared with 4 billion if without redundant encoding).
ObfusMem
Authors: Awad Amro , Wang Yipeng , Shands Deborah , Solihin Yan 
Published: September 2017

Trustworthy software requires strong privacy and security guarantees from a secure trust base in hardware. While chipmakers provide hardware support for basic security and privacy primitives such as enclaves and memory encryption. these primitives do not address hiding of the memory access pattern, information about which may enable attacks on the system or reveal characteristics of sensitive user data. State-of-the-art approaches to protecting the access pattern are largely based on Oblivious RAM (ORAM). Unfortunately, current ORAM implementations suffer from very significant practicality and overhead concerns, including roughly an order of magnitude slowdown, more than 100% memory capacity overheads, and the potential for system deadlock.
Memory technology trends are moving towards 3D and 2.5D integration, enabling significant logic capabilities and sophisticated memory interfaces. Leveraging the trends, we propose a new approach to access pattern obfuscation, called ObfusMem. ObfusMem adds the memory to the trusted computing base and incorporates cryptographic engines within the memory. ObfusMem encrypts commands and addresses on the memory bus, hence the access pattern is cryptographically obfuscated from external observers. Our evaluation shows that ObfusMem incurs an overhead of 10.9% on average, which is about an order of magnitude faster than ORAM implementations. Furthermore, ObfusMem does not incur capacity overheads and does not amplify writes. We analyze and compare the security protections provided by ObfusMem and ORAM, and highlight their differences.
ThermoGater
Authors: Khatamifard S. Karen , Wang Longfei , Yu Weize , Köse Selçuk , Karpuzcu Ulya R. 
Published: September 2017

Tailoring the operating voltage to fine-grain temporal changes in the power and performance needs of the workload can effectively enhance power efficiency. Therefore, power-limited computing platforms of today widely deploy integrated (i.e., on-chip) voltage regulation which enables fast fine-grain voltage control. Voltage regulators convert and distribute power from an external energy source to the processor. Unfortunately, power conversion loss is inevitable and projected integrated regulator designs are unlikely to eliminate this loss even asymptotically. Reconfigurable power delivery by selective shut-down, i.e., gating, of distributed on-chip regulators in response to spatio-temporal changes in power demand can sustain operation at the minimum conversion loss. However, even the minimum conversion loss is sizable, and as conversion loss gets dissipated as heat, on-chip regulators can easily cause thermal emergencies due to their small footprint.
Although reconfigurable distributed on-chip power delivery is emerging as a new design paradigm to enforce sustained operation at minimum possible power conversion loss, thermal implications have been overlooked at the architectural level. This paper hence provides a thermal characterization. We introduce ThermoGater, an architectural governor for a collection of practical, thermally-aware regulator gating policies to mitigate (if not prevent) regulator-induced thermal emergencies, which also consider potential implications for voltage noise. Practical ThermoGater policies can not only sustain minimum power conversion loss throughout execution effectively, but also keep the maximum temperature (thermal gradient) across chip within 0.6°C (0.3°C) on average in comparison to thermally-optimal oracular regulator gating, while the maximum voltage noise stays within 1.0% of the best case voltage noise profile.
There and Back Again
Authors: Poremba Matthew , Akgun Itir , Yin Jieming , Kayiran Onur , Xie Yuan , Loh Gabriel H. 
Published: September 2017

High-performance computing, enterprise, and datacenter servers are driving demands for higher total memory capacity as well as memory performance. Memory "cubes" with high per-package capacity (from 3D integration) along with high-speed point-to-point interconnects provide a scalable memory system architecture with the potential to deliver both capacity and performance. Multiple such cubes connected together can form a "Memory Network" (MN), but the design space for such MNs is quite vast, including multiple topology types and multiple memory technologies per memory cube.
In this work, we first analyze several MN topologies with different mixes of memory package technologies to understand the key tradeoffs and bottlenecks for such systems. We find that most of a MN's performance challenges arise from the interconnection network that binds the memory cubes together. In particular, arbitration schemes used to route through MNs, ratio of NVM to DRAM, and specific topologies used have dramatic impact on performance and energy results. Our initial analysis indicates that introducing non-volatile memory to the MN presents a unique tradeoff between memory array latency and network latency. We observe that placing NVM cubes in a specific order in the MN improves performance by reducing the network size/diameter up to a certain NVM to DRAM ratio. Novel MN topologies and arbitration schemes also provide performance and energy deltas by reducing the hop count of requests and response in the MN. Based on our analyses, we introduce three techniques to address MN latency issues: (1) Distance-based arbitration scheme to improve queuing latencies throughout the network, (2) skip-list topology, derived from the classic data structure, to improve network latency and link usage, and (3) the MetaCube, a denser memory cube that leverages advanced packaging technologies to improve latency by reducing MN size.
Nivolumab Exposure–Response Analyses of Efficacy and Safety in Previously Treated Squamous or Nonsquamous Non–Small Cell Lung Cancer
Authors: Feng Yan , Wang Xiaoning , Bajaj Gaurav , Agrawal Shruti , Bello Akintunde , Lestini Brian , Finckenstein Friedrich Graf , Park Jong-Soon , Roy Amit 
Published: September 2017

Abstract
Purpose: Nivolumab is a fully human IgG4 monoclonal antiprogrammed death-1 antibody with demonstrated efficacy, including durable responses and prolonged survival, in patients with previously treated, advanced non–small cell lung cancer (NSCLC). Exposure–response (E–R) analyses for efficacy and safety were conducted to inform the benefit–risk assessment of nivolumab in this patient population.
Experimental Design: The analyses used clinical trial data from patients with squamous (n = 293) or nonsquamous (n = 354) NSCLC from four clinical trials who received nivolumab doses of 1 to 10 mg/kg every 2 weeks. E–R efficacy analyses were performed by investigating the relationship between time-averaged nivolumab concentration after the first dose (Cavg1) and the probability of overall survival by histology. E–R safety analyses examined relationships between nivolumab Cavg1 and hazards of adverse events leading to discontinuation or death (AEs-DC/D).
Results: Nivolumab exposure was not associated with overall survival [the 95% confidence interval (CI) of effect included 1] in patients with squamous (HR, 0.802; 95% CI, 0.555–1.16) or nonsquamous NSCLC (HR, 0.94; 95% CI, 0.683–1.29). Similarly, nivolumab exposure was not associated with AEs-DC/D in the overall population (HR, 0.917; 95% CI, 0.644–1.31). The risk of AEs-DC/D was similar among patients with squamous or nonsquamous histology.
Conclusions: Nivolumab monotherapy demonstrated a wide therapeutic margin, as evidenced by relatively flat E–R relationships over the range of exposures produced by doses of 1 to 10 mg/kg every 2 weeks (Q2W), supporting the use of the initially approved dose of 3 mg/kg Q2W in patients with NSCLC. Clin Cancer Res; 23(18); 5394–405. ©2017 AACR.
Tumor Resection Recruits Effector T Cells and Boosts Therapeutic Efficacy of Encapsulated Stem Cells Expressing IFNβ in Glioblastomas
Authors: Choi Sung Hugh , Stuckey Daniel W. , Pignatta Sara , Reinshagen Clemens , Khalsa Jasneet Kaur , Roozendaal Nicolaas , Martinez-Quintanilla Jordi , Tamura Kaoru , Keles Erhan , Shah Khalid 
Published: September 2017

Abstract
Purpose: Despite tumor resection being the first-line clinical care for glioblastoma (GBM) patients, nearly all preclinical immune therapy models intend to treat established GBM. Characterizing cytoreductive surgery-induced immune response combined with the administration of immune cytokines has the potential of offering a new treatment paradigm of immune therapy for GBMs.
Experimental Design: We developed syngeneic orthotopic mouse GBM models of tumor resection and characterized the immune response of intact and resected tumors. We also created a highly secretable variant of immune cytokine IFNβ to enhance its release from engineered mouse mesenchymal stem cells (MSC-IFNβ) and assessed whether surgical resection of intracranial GBM tumor significantly enhanced the antitumor efficacy of targeted on-site delivery of encapsulated MSC-IFNβ.
Results: We show that tumor debulking results in substantial reduction of myeloid-derived suppressor cells (MDSC) and simultaneous recruitment of CD4/CD8 T cells. This immune response significantly enhanced the antitumor efficacy of locally delivered encapsulated MSC-IFNβ via enhanced selective postsurgical infiltration of CD8 T cells and directly induced cell-cycle arrest in tumor cells, resulting in increased survival of mice. Utilizing encapsulated human MSC-IFNβ in resected orthotopic tumor xenografts of patient-derived GBM, we further show that IFNβ induces cell-cycle arrest followed by apoptosis, resulting in increased survival in immunocompromised mice despite their absence of an intact immune system.
Conclusions: This study demonstrates the importance of syngeneic tumor resection models in developing cancer immunotherapies and emphasizes the translational potential of local delivery of immunotherapeutic agents in treating cancer. Clin Cancer Res; 23(22); 7047–58. ©2017 AACR.
The herpetofauna of the Serra do Urubu mountain range: a key biodiversity area for conservation in the brazilian atlantic forest
Authors: Roberto Igor Joventino , Oliveira Cícero Ricardo de , Araújo Filho João Antonio de , Oliveira Herivelto Faustino de , Ávila Robson Waldemar 
Published: September 2017

The Serra do Urubu mountain range is considered a key biodiversity area. It is situated in the Pernambuco Endemism Center, one of the most threatened regions of the Brazilian Atlantic Forest. However, despite the high importance of this area little research on its herpetofauna has been performed. The present study presents an inventory of the herpetofauna of the region, through bibliographic review, searches in museum collections and field expeditions to the RPPNs Frei Caneca and Pedra D’Antas, in the municipalities of Jaqueira and Lagoa dos Gatos. The conservation status of the amphibians of the region is discussed. Five expeditions, between 2012 and 2013 were made. The methods employed were visual transect surveys, acoustic census and pitfall traps. We recorded a total of 46 amphibian species, belonging to nine families: Craugastoridae (3 spp.), Bufonidae (3 spp.), Ranidae (1 sp.), Hylidae (25 spp.), Leptodactylidae (8 spp.), Odontophrynidae (1 sp.), Hemiphractidae (2 spp.), Phyllomedusidae (2 spp.) and Microhylidae (1 sp.). We recorded 42 species of squamates: 16 species of lizards families Phyllodactylidae (1 sp.), Gekkonidae (1 sp.), Gymnophthalmidae (1 sp.), Polychrotidae (1 sp.), Leiosauridae (1 sp.), Tropiduridae (3 spp.), Dactyloidae (2 spp.), Diploglossidae (2 spp.), Teiidae (2 spp.), Scincidae (1 sp.), and Iguanidae (1 sp.); and 24 species of snakes: Boidae (3 spp.), Colubridae (2 spp.), Dipsadidae (13 spp.), Elapidae (2 spp.), Typhlopidae (1 sp.), and Viperidae (3 spp.). The occurrence of rare and/or threatened species such as the snakes Dipsas sazimai, Lachesis muta and Sibynomorphus sp. and the amphibians Hylomantis granulosa, Chiasmocleis alagoana, Boana freicanecae and Phyllodytes gyrinaethes reinforces the need for conservation measures at this highly threatened region of the Atlantic Forest.
Epicardial Breakthrough Waves During Sinus Rhythm
Authors: Mouws Elisabeth M.J.P. , Lanters Eva A.H. , Teuwen Christophe P. , van der Does Lisette J.M.E. , Kik Charles , Knops Paul , Bekkers Jos A. , Bogers Ad J.J.C. , de Groot Natasja M.S. 
Published: September 2017

Background:
Epicardial breakthrough waves (EBW) during atrial fibrillation are important elements of the arrhythmogenic substrate and result from endo-epicardial asynchrony, which also occurs to some degree during sinus rhythm (SR). We examined the incidence and characteristics of EBW during SR and its possible value in the detection of the arrhythmogenic substrate associated with atrial fibrillation.

Methods and Results:

Intraoperative epicardial mapping (interelectrode distances 2 mm) of the right atrium, Bachmann’s bundle, the left atrioventricular groove, and the pulmonary vein area was performed during SR in 381 patients (289 male, 67±10 years) with ischemic or valvular heart disease. EBW were referred to as sinus node breakthrough waves if they were the earliest right atrial activated site. A total of 218 EBW and 57 sinus node breakthrough waves were observed in 168 patients (44%). EBW mostly occurred at right atrium (N=105, 48%) and left atrioventricular groove (N=67, 31%), followed by Bachmann’s bundle (N=27, 12%) and pulmonary vein area (N=19, 9%;
P
<0.001). EBW occurred most often in ischemic heart disease patients (N=114, 49%) compared with (ischemic and) valvular heart disease patients (N=26, 17%;
P
<0.001). EBW electrograms most often consisted of double and fractionated potentials (N=137, 63%). In case of single potentials, an R wave was observed in 88% (N=71) of EBW, as opposed to 21% of sinus node breakthrough waves (N=5;
P
<0.001). Fractionated EBW potentials were more often observed at the right atrium and Bachmann’s bundle (
P
<0.001).

Conclusions:
During SR, EBW are present in over a third of patients, particularly in thicker parts of the atrial wall. Features of SR EBW indicate that muscular connections between endo- and epicardium underlie EBW and that a slight degree of endo-epicardial asynchrony required for EBW to occur is already present in some areas during SR. Hence, an anatomic substrate is present, which may enhance the occurrence of EBW during atrial fibrillation, thereby promoting atrial fibrillation persistence.
Race and Socioeconomic Differences Associated With Changes in Statin Eligibility Under the 2013 American College of Cardiology/American Heart Association Cholesterol Guidelines
Authors: Verma Amol A. , Jimenez Marcia P. , Subramanian S.V. , Sniderman Allan D. , Razak Fahad 
Published: September 2017

Background—
The 2013 American College of Cardiology/American Heart Association (ACC/AHA) guidelines expanded eligibility criteria for statins. We examined race and socioeconomic differences associated with these changes.

Methods and Results—

This was an observational study of adults between 40 and 75 years of age using data from the National Health and Nutrition Examination Surveys between 2005 and 2012. Change in eligibility for statins was assessed based on the third adult treatment panel criteria and the 2013 ACC/AHA guidelines. Differences relating to self-reported race, income, education, and insurance status were assessed in models that were adjusted for age and each of the other factors. Statin eligibility increased among all race, education, and income groups. Becoming newly eligible for statins was more likely for black people (25.8% newly eligible; adjusted odds ratio, 3.8;
P
<0.001), people of other races (18.7%; adjusted odds ratio, 2.5;
P
<0.001), those with no more than high-school education (17.3%; adjusted odds ratio, 1.7;
P
=0.001), and those with no health insurance (17.6%; adjusted odds ratio, 1.5;
P
<0.001) compared with white people (14.5%), those who completed college (13.0%), and those with health insurance (15.6%). Income differences were not significant after adjusting for age, race, and education. These differences were driven by the prevalence of elevated predicted cardiac risk and diabetes mellitus. Among the US adults who were newly eligible for statins, 12.4 million (66.3%) were nonwhite, had lower education or lower income, and 3.0 million (16.1%) had no health insurance. Race and socioeconomic differences in statin eligibility were more pronounced under the 2013 ACC/AHA guidelines than under third adult treatment panel. If treatment disparities remain unchanged, the 2013 ACC/AHA guidelines increase the number of US adults who are eligible but do not receive statins by 3.0 million nonwhites, 3.6 million with no more than high-school education, and 4.1 million in the lowest 2 income quartiles.

Conclusions—
The 2013 ACC/AHA guidelines increase statin eligibility most among adults with nonwhite race, socioeconomic disadvantage, and no health insurance. Without improving access to healthcare, the potential gains from expanding indications for cardioprotective medications will not be realized.