T. Nakai, D. Suzuki, and T. Fujino, “Timing Black-Box Attacks: Crafting Adversarial Examples through Timing Leaks against DNNs on Embedded Devices”, TCHES, vol. 2021, no. 3, pp. 149–175, Jul. 2021.