{"total":22,"rows":[{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2309.05610","title":"Privacy Side Channels in Machine Learning Systems","created":"2023-09-11","cited_by_count":40,"area":null},{"id":"2106.15764","title":"The Threat of Offensive AI to Organizations","created":"2021-06-30","cited_by_count":38,"area":null},{"id":"2407.00125","title":"A Survey on Failure Analysis and Fault Injection in AI Systems","created":"2024-06-28","cited_by_count":10,"area":null},{"id":"2211.05590","title":"A Practical Introduction to Side-Channel Extraction of Deep Neural Network Parameters","created":"2022-11-10","cited_by_count":9,"area":null},{"id":"2109.11249","title":"FooBaR: Fault Fooling Backdoor Attack on Neural Network Training","created":"2021-09-23","cited_by_count":6,"area":null},{"id":"2502.16065","title":"A Survey of Model Extraction Attacks and Defenses in Distributed Computing Environments","created":"2025-02-22","cited_by_count":6,"area":null},{"id":"2303.18132","title":"A Desynchronization-Based Countermeasure Against Side-Channel Analysis of Neural Networks","created":"2023-03-25","cited_by_count":5,"area":null},{"id":"2308.16703","title":"Fault Injection and Safe-Error Attack for Extraction of Embedded Neural Network Models","created":"2023-08-31","cited_by_count":5,"area":null},{"id":"2408.16929","title":"AI-driven Reverse Engineering of QML Models","created":"2024-08-29","cited_by_count":5,"area":null},{"id":"2105.01401","title":"A Review of Confidentiality Threats Against Embedded Neural Network Models","created":"2021-05-04","cited_by_count":4,"area":null},{"id":"2203.06570","title":"Model Inversion Attack against Transfer Learning: Inverting a Model without Accessing It","created":"2022-03-13","cited_by_count":4,"area":null},{"id":"2407.16467","title":"Side-Channel Analysis of OpenVINO-based Neural Network Models","created":"2024-07-23","cited_by_count":4,"area":null},{"id":"2405.13891","title":"DeepNcode: Encoding-Based Protection against Bit-Flip Attacks on Neural Networks","created":"2024-05-22","cited_by_count":3,"area":null},{"id":"2510.00151","title":"Stealing AI Model Weights Through Covert Communication Channels","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2112.03477","title":"BDFA: A Blind Data Adversarial Bit-flip Attack on Deep Neural Networks","created":"2021-12-07","cited_by_count":1,"area":null},{"id":"2407.21220","title":"DeepBaR: Fault Backdoor Attack on Deep Neural Network Layers","created":"2024-07-30","cited_by_count":1,"area":null},{"id":"2602.16309","title":"The Weight of a Bit: EMFI Sensitivity Analysis of Embedded Deep Learning Models","created":"2026-02-18","cited_by_count":1,"area":null},{"id":"2311.01205","title":"Attacking Graph Neural Networks with Bit Flips: Weisfeiler and Lehman Go Indifferent","created":"2023-11-02","cited_by_count":0,"area":null},{"id":"2604.18716","title":"TrEEStealer: Stealing Decision Trees via Enclave Side Channels","created":"2026-04-20","cited_by_count":0,"area":null},{"id":"2605.22437","title":"Characterizing the Fault Response of the Intel Neural Compute Stick 2 Under Single-Pulse Electromagnetic Fault Injection","created":"2026-05-21","cited_by_count":0,"area":null},{"id":"2610.04436","title":"Guess My Weight: Profiled Side-Channel Recovery of Floating-Point Neural-Network Weights","created":"2026-10-03","cited_by_count":0,"area":null}],"next_cursor":null}