“‘Whispering MLaaS’: Exploiting Timing Channels to Compromise User Privacy in Deep Neural Networks” (2023) IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(2), pp. 587–613. doi:10.46586/tches.v2023.i2.587-613.