{"total":36,"rows":[{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2202.08602","title":"Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations","created":"2022-02-17","cited_by_count":61,"area":null},{"id":"2212.14315","title":"\"Real Attackers Don't Compute Gradients\": Bridging the Gap Between Adversarial ML Research and Practice","created":"2022-12-29","cited_by_count":56,"area":null},{"id":"2111.04625","title":"DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories","created":"2021-11-08","cited_by_count":42,"area":null},{"id":"2104.12378","title":"Delving into Data: Effectively Substitute Training for Black-box Attack","created":"2021-04-26","cited_by_count":27,"area":null},{"id":"2201.05889","title":"StolenEncoder: Stealing Pre-trained Encoders in Self-supervised Learning","created":"2022-01-15","cited_by_count":23,"area":null},{"id":"2310.07152","title":"No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device ML","created":"2023-10-11","cited_by_count":21,"area":null},{"id":"2205.10364","title":"Learning to Reverse DNNs from AI Programs Automatically","created":"2022-05-20","cited_by_count":12,"area":null},{"id":"2411.10023","title":"Model Inversion Attacks: A Survey of Approaches and Countermeasures","created":"2024-11-15","cited_by_count":11,"area":null},{"id":"2109.10870","title":"SoK: Machine Learning Governance","created":"2021-09-20","cited_by_count":10,"area":null},{"id":"2404.05182","title":"DLoRA: Distributed Parameter-Efficient Fine-Tuning Solution for Large Language Model","created":"2024-04-08","cited_by_count":8,"area":null},{"id":"2210.01075","title":"Decompiling x86 Deep Neural Network Executables","created":"2022-10-03","cited_by_count":7,"area":null},{"id":"2406.10011","title":"Beyond Slow Signs in High-fidelity Model Extraction","created":"2024-06-14","cited_by_count":7,"area":null},{"id":"2110.03175","title":"Fingerprinting Multi-exit Deep Neural Network Models via Inference Time","created":"2021-10-07","cited_by_count":4,"area":null},{"id":"2111.03308","title":"Confidential Machine Learning Computation in Untrusted Environments: A Systems Security Perspective","created":"2021-11-05","cited_by_count":4,"area":null},{"id":"2208.08569","title":"ObfuNAS: A Neural Architecture Search-based DNN Obfuscation Approach","created":"2022-08-17","cited_by_count":4,"area":null},{"id":"2310.01959","title":"Beyond Labeling Oracles: What does it mean to steal ML models?","created":"2023-10-03","cited_by_count":4,"area":null},{"id":"2106.11424","title":"HODA: Hardness-Oriented Detection of Model Extraction Attacks","created":"2021-06-21","cited_by_count":3,"area":null},{"id":"2309.06223","title":"Compiled Models, Built-In Exploits: Uncovering Pervasive Bit-Flip Attack Surfaces in DNN Executables","created":"2023-09-12","cited_by_count":3,"area":null},{"id":"2403.14641","title":"Testing autonomous vehicles and AI: perspectives and challenges from cybersecurity, transparency, robustness and fairness","created":"2024-02-21","cited_by_count":3,"area":null},{"id":"2411.09945","title":"TEESlice: Protecting Sensitive Neural Network Models in Trusted Execution Environments When Attackers have Pre-Trained Models","created":"2024-11-15","cited_by_count":3,"area":null},{"id":"2508.19641","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","created":"2025-08-27","cited_by_count":3,"area":null},{"id":"2209.06300","title":"PINCH: An Adversarial Extraction Attack Framework for Deep Learning Models","created":"2022-09-13","cited_by_count":2,"area":null},{"id":"2410.08015","title":"Non-transferable Pruning","created":"2024-10-10","cited_by_count":2,"area":null},{"id":"2510.00151","title":"Stealing AI Model Weights Through Covert Communication Channels","created":"2025-09-30","cited_by_count":2,"area":null},{"id":"2109.14857","title":"First to Possess His Statistics: Data-Free Model Extraction Attack on Tabular Data","created":"2021-09-30","cited_by_count":1,"area":null},{"id":"2112.03477","title":"BDFA: A Blind Data Adversarial Bit-flip Attack on Deep Neural Networks","created":"2021-12-07","cited_by_count":1,"area":null},{"id":"2411.13459","title":"SoK: A Systems Perspective on Compound AI Threats and Countermeasures","created":"2024-11-20","cited_by_count":1,"area":null},{"id":"2207.09539","title":"Revealing Secrets From Pre-trained Models","created":"2022-07-19","cited_by_count":0,"area":null},{"id":"2307.10997","title":"DREAM: Domain-free Reverse Engineering Attributes of Black-box Model","created":"2023-07-20","cited_by_count":0,"area":null},{"id":"2309.16577","title":"Compilation as a Defense: Enhancing DL Model Attack Robustness via Tensor Optimization","created":"2023-09-20","cited_by_count":0,"area":null},{"id":"2401.11723","title":"Unraveling Attacks in Machine Learning-based IoT Ecosystems: A Survey and the Open Libraries Behind Them","created":"2024-01-22","cited_by_count":0,"area":null},{"id":"2406.03405","title":"Amalgam: A Framework for Obfuscated Neural Network Training on the Cloud","created":"2024-06-02","cited_by_count":0,"area":null},{"id":"2410.15409","title":"PEAS: A Strategy for Crafting Transferable Adversarial Examples","created":"2024-10-20","cited_by_count":0,"area":null},{"id":"2412.05842","title":"DREAM: Domain-agnostic Reverse Engineering Attributes of Black-box Model","created":"2024-12-08","cited_by_count":0,"area":null},{"id":"2508.20307","title":"Surveying the Operational Cybersecurity and Supply Chain Threat Landscape when Developing and Deploying AI Systems","created":"2025-08-27","cited_by_count":0,"area":null}],"next_cursor":null}