{"total":27,"rows":[{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2111.04625","title":"DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories","created":"2021-11-08","cited_by_count":42,"area":null},{"id":"2309.05610","title":"Privacy Side Channels in Machine Learning Systems","created":"2023-09-11","cited_by_count":40,"area":null},{"id":"2208.10134","title":"Machine Learning with Confidential Computing: A Systematization of Knowledge","created":"2022-08-22","cited_by_count":15,"area":null},{"id":"2211.05590","title":"A Practical Introduction to Side-Channel Extraction of Deep Neural Network Parameters","created":"2022-11-10","cited_by_count":9,"area":null},{"id":"2109.07395","title":"Can one hear the shape of a neural network?: Snooping the GPU via Magnetic Side Channel","created":"2021-09-15","cited_by_count":8,"area":null},{"id":"2210.01075","title":"Decompiling x86 Deep Neural Network Executables","created":"2022-10-03","cited_by_count":7,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2502.16065","title":"A Survey of Model Extraction Attacks and Defenses in Distributed Computing Environments","created":"2025-02-22","cited_by_count":6,"area":null},{"id":"2110.11290","title":"Physical Side-Channel Attacks on Embedded Neural Networks: A Survey","created":"2021-10-21","cited_by_count":5,"area":null},{"id":"2105.01401","title":"A Review of Confidentiality Threats Against Embedded Neural Network Models","created":"2021-05-04","cited_by_count":4,"area":null},{"id":"2111.03308","title":"Confidential Machine Learning Computation in Untrusted Environments: A Systems Security Perspective","created":"2021-11-05","cited_by_count":4,"area":null},{"id":"2310.01959","title":"Beyond Labeling Oracles: What does it mean to steal ML models?","created":"2023-10-03","cited_by_count":4,"area":null},{"id":"2105.01403","title":"An Overview of Laser Injection against Embedded Neural Network Models","created":"2021-05-04","cited_by_count":3,"area":null},{"id":"2304.03388","title":"InferNet: Exploiting Aggregate GPU Profiles as Side-Channel for DNN Architecture Inference","created":"2023-04-06","cited_by_count":3,"area":null},{"id":"2304.11056","title":"PowerGAN: A Machine Learning Approach for Power Side-Channel Attack on Compute-in-Memory Accelerators","created":"2023-04-13","cited_by_count":2,"area":null},{"id":"2311.01344","title":"Like an Open Book? Read Neural Network Architecture with Simple Power Analysis on 32-bit Microcontrollers","created":"2023-11-02","cited_by_count":2,"area":null},{"id":"2510.00151","title":"Stealing AI Model Weights Through Covert Communication Channels","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2108.12579","title":"Power-Based Attacks on Spatial DNN Accelerators","created":"2021-08-28","cited_by_count":1,"area":null},{"id":"2401.13575","title":"CNN architecture extraction on edge GPU","created":"2024-01-24","cited_by_count":1,"area":null},{"id":"2411.13459","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","created":"2024-11-20","cited_by_count":1,"area":null},{"id":"2311.00579","title":"Revealing CNN Architectures via Side-Channel Analysis in Dataflow-based Inference Accelerators","created":"2023-11-01","cited_by_count":0,"area":null},{"id":"2406.03405","title":"Amalgam: A Framework for Obfuscated Neural Network Training on the Cloud","created":"2024-06-02","cited_by_count":0,"area":null},{"id":"2502.14968","title":"P2W: From Power Traces to Weights Matrix -- An Unconventional Transfer Learning Approach","created":"2025-02-20","cited_by_count":0,"area":null},{"id":"2508.21654","title":"I Stolenly Swear That I Am Up to (No) Good: Design and Evaluation of Model Stealing Attacks","created":"2025-08-29","cited_by_count":0,"area":null},{"id":"2512.23948","title":"DivQAT: Enhancing Robustness of Quantized Convolutional Neural Networks against Model Extraction Attacks","created":"2025-12-30","cited_by_count":0,"area":null},{"id":"2602.09740","title":"Robust Vision Systems for Connected and Autonomous Vehicles: Security Challenges and Attack Vectors","created":"2026-02-10","cited_by_count":0,"area":null}],"next_cursor":null}