{"total":17,"rows":[{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2309.05610","title":"Privacy Side Channels in Machine Learning Systems","created":"2023-09-11","cited_by_count":40,"area":null},{"id":"2403.09751","title":"What Was Your Prompt? A Remote Keylogging Attack on AI Assistants","created":"2024-03-14","cited_by_count":26,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2110.11290","title":"Physical Side-Channel Attacks on Embedded Neural Networks: A Survey","created":"2021-10-21","cited_by_count":5,"area":null},{"id":"2106.11424","title":"HODA: Hardness-Oriented Detection of Model Extraction Attacks","created":"2021-06-21","cited_by_count":3,"area":null},{"id":"2304.03388","title":"InferNet: Exploiting Aggregate GPU Profiles as Side-Channel for DNN Architecture Inference","created":"2023-04-06","cited_by_count":3,"area":null},{"id":"2209.06300","title":"PINCH: An Adversarial Extraction Attack Framework for Deep Learning Models","created":"2022-09-13","cited_by_count":2,"area":null},{"id":"2503.19142","title":"Activation Functions Considered Harmful: Recovering Neural Network Weights through Controlled Channels","created":"2025-03-24","cited_by_count":2,"area":null},{"id":"2510.00151","title":"Stealing AI Model Weights Through Covert Communication Channels","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2411.13459","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","created":"2024-11-20","cited_by_count":1,"area":null},{"id":"2503.07568","title":"Runtime Detection of Adversarial Attacks in AI Accelerators Using Performance Counters","created":"2025-03-10","cited_by_count":1,"area":null},{"id":"2208.01113","title":"On the Evaluation of User Privacy in Deep Neural Networks using Timing Side Channel","created":"2022-08-01","cited_by_count":0,"area":null},{"id":"2304.01990","title":"Side Channel-Assisted Inference Leakage from Machine Learning-based ECG Classification","created":"2023-04-04","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2402.11953","title":"Stealing the Invisible: Unveiling Pre-Trained CNN Models through Adversarial Examples and Timing Side-Channels","created":"2024-02-19","cited_by_count":0,"area":null},{"id":"2608.22716","title":"TEE-X: TEE-aware Acceleration Framework for Large Vision Models at the Edge","created":"2026-08-24","cited_by_count":0,"area":null}],"next_cursor":null}