{"total":34,"rows":[{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2111.04625","title":"DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories","created":"2021-11-08","cited_by_count":42,"area":null},{"id":"2101.02559","title":"Robust Machine Learning Systems: Challenges, Current Trends, Perspectives, and the Road Ahead","created":"2021-01-04","cited_by_count":41,"area":null},{"id":"2309.05610","title":"Privacy Side Channels in Machine Learning Systems","created":"2023-09-11","cited_by_count":40,"area":null},{"id":"2403.09751","title":"What Was Your Prompt? A Remote Keylogging Attack on AI Assistants","created":"2024-03-14","cited_by_count":26,"area":null},{"id":"2405.19524","title":"AI Risk Management Should Incorporate Both Safety and Security","created":"2024-05-29","cited_by_count":17,"area":null},{"id":"2205.10364","title":"Learning to Reverse DNNs from AI Programs Automatically","created":"2022-05-20","cited_by_count":12,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2209.03563","title":"SSL-WM: A Black-Box Watermarking Approach for Encoders Pre-trained by Self-supervised Learning","created":"2022-09-08","cited_by_count":9,"area":null},{"id":"2302.02162","title":"AUTOLYCUS: Exploiting Explainable AI (XAI) for Model Extraction Attacks against Interpretable Models","created":"2023-02-04","cited_by_count":9,"area":null},{"id":"2109.07395","title":"Can one hear the shape of a neural network?: Snooping the GPU via Magnetic Side Channel","created":"2021-09-15","cited_by_count":8,"area":null},{"id":"2210.01075","title":"Decompiling x86 Deep Neural Network Executables","created":"2022-10-03","cited_by_count":7,"area":null},{"id":"2111.03308","title":"Confidential Machine Learning Computation in Untrusted Environments: A Systems Security Perspective","created":"2021-11-05","cited_by_count":4,"area":null},{"id":"2201.08661","title":"The Security of Deep Learning Defences for Medical Imaging","created":"2022-01-21","cited_by_count":4,"area":null},{"id":"2209.04022","title":"Privacy of Autonomous Vehicles: Risks, Protection Methods, and Future Directions","created":"2022-09-08","cited_by_count":4,"area":null},{"id":"2310.01959","title":"Beyond Labeling Oracles: What does it mean to steal ML models?","created":"2023-10-03","cited_by_count":4,"area":null},{"id":"2104.12623","title":"Good Artists Copy, Great Artists Steal: Model Extraction Attacks Against Image Translation Models","created":"2021-04-26","cited_by_count":3,"area":null},{"id":"2410.03566","title":"A Survey on Offensive AI Within Cybersecurity","created":"2024-09-26","cited_by_count":3,"area":null},{"id":"2209.06300","title":"PINCH: An Adversarial Extraction Attack Framework for Deep Learning Models","created":"2022-09-13","cited_by_count":2,"area":null},{"id":"2311.01344","title":"Like an Open Book? Read Neural Network Architecture with Simple Power Analysis on 32-bit Microcontrollers","created":"2023-11-02","cited_by_count":2,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2502.18077","title":"Examining the Threat Landscape: Foundation Models and Model Stealing","created":"2025-02-25","cited_by_count":2,"area":null},{"id":"2503.19142","title":"Activation Functions Considered Harmful: Recovering Neural Network Weights through Controlled Channels","created":"2025-03-24","cited_by_count":2,"area":null},{"id":"2510.00151","title":"Stealing AI Model Weights Through Covert Communication Channels","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2108.12579","title":"Power-Based Attacks on Spatial DNN Accelerators","created":"2021-08-28","cited_by_count":1,"area":null},{"id":"2309.02159","title":"The Adversarial Implications of Variable-Time Inference","created":"2023-09-05","cited_by_count":1,"area":null},{"id":"2411.13459","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","created":"2024-11-20","cited_by_count":1,"area":null},{"id":"2206.04793","title":"Securing AI-based Healthcare Systems using Blockchain Technology: A State-of-the-Art Systematic Literature Review and Future Research Directions","created":"2022-05-30","cited_by_count":0,"area":null},{"id":"2208.01113","title":"On the Evaluation of User Privacy in Deep Neural Networks using Timing Side Channel","created":"2022-08-01","cited_by_count":0,"area":null},{"id":"2304.05561","title":"On the Adversarial Inversion of Deep Biometric Representations","created":"2023-04-12","cited_by_count":0,"area":null},{"id":"2402.11953","title":"Stealing the Invisible: Unveiling Pre-Trained CNN Models through Adversarial Examples and Timing Side-Channels","created":"2024-02-19","cited_by_count":0,"area":null},{"id":"2508.21654","title":"I Stolenly Swear That I Am Up to (No) Good: Design and Evaluation of Model Stealing Attacks","created":"2025-08-29","cited_by_count":0,"area":null},{"id":"2607.01313","title":"Black-Box Inference of LLM Architectural Properties with Restrictive API Access","created":"2026-07-01","cited_by_count":0,"area":null},{"id":"2608.26982","title":"JudgeStealer: Extracting LLM Judging Capabilities across Evaluation Protocols","created":"2026-08-27","cited_by_count":0,"area":null}],"next_cursor":null}