Polynomial Time Cryptanalytic Extraction of Deep Neural Networks in the Hard-Label Setting
Fuente:
arXiv
Saved in:
| Main Authors: | Carlini, Nicholas, Chávez-Saab, Jorge, Hambitzer, Anna, Rodríguez-Henríquez, Francisco, Shamir, Adi |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
Similar Items
Is the Hard-Label Cryptanalytic Model Extraction Really Polynomial?
by: Ito, Akira, et al.
Published: (2025)
by: Ito, Akira, et al.
Published: (2025)
Hard-Label Cryptanalytic Extraction of Neural Network Models
by: Chen, Yi, et al.
Published: (2024)
by: Chen, Yi, et al.
Published: (2024)
Delving into Cryptanalytic Extraction of PReLU Neural Networks
by: Chen, Yi, et al.
Published: (2025)
by: Chen, Yi, et al.
Published: (2025)
A Divide-and-Conquer Strategy for Hard-Label Extraction of Deep Neural Networks via Side-Channel Attacks
by: Coqueret, Benoit, et al.
Published: (2024)
by: Coqueret, Benoit, et al.
Published: (2024)
Train to Defend: First Defense Against Cryptanalytic Neural Network Parameter Extraction Attacks
by: Kurian, Ashley, et al.
Published: (2025)
by: Kurian, Ashley, et al.
Published: (2025)
Detecting Adversarial Fine-tuning with Auditing Agents
by: Egler, Sarah, et al.
Published: (2025)
by: Egler, Sarah, et al.
Published: (2025)
Exploring Query Efficient Data Generation towards Data-free Model Stealing in Hard Label Setting
by: Pei, Gaozheng, et al.
Published: (2024)
by: Pei, Gaozheng, et al.
Published: (2024)
Facial Misrecognition Systems: Simple Weight Manipulations Force DNNs to Err Only on Specific Persons
by: Zehavi, Irad, et al.
Published: (2023)
by: Zehavi, Irad, et al.
Published: (2023)
Eclectic Rule Extraction for Explainability of Deep Neural Network based Intrusion Detection Systems
by: Ables, Jesse, et al.
Published: (2024)
by: Ables, Jesse, et al.
Published: (2024)
Remote Timing Attacks on Efficient Language Model Inference
by: Carlini, Nicholas, et al.
Published: (2024)
by: Carlini, Nicholas, et al.
Published: (2024)
Fault Injection and Safe-Error Attack for Extraction of Embedded Neural Network Models
by: Hector, Kevin, et al.
Published: (2023)
by: Hector, Kevin, et al.
Published: (2023)
Non-Adaptive Cryptanalytic Time-Space Lower Bounds via a Shearer-like Inequality for Permutations
by: Dinur, Itai, et al.
Published: (2025)
by: Dinur, Itai, et al.
Published: (2025)
Membership Privacy Evaluation in Deep Spiking Neural Networks
by: Li, Jiaxin, et al.
Published: (2024)
by: Li, Jiaxin, et al.
Published: (2024)
Cutting through buggy adversarial example defenses: fixing 1 line of code breaks Sabre
by: Carlini, Nicholas
Published: (2024)
by: Carlini, Nicholas
Published: (2024)
Defending against Stegomalware in Deep Neural Networks with Permutation Symmetry
by: Torpmann-Hagen, Birk, et al.
Published: (2025)
by: Torpmann-Hagen, Birk, et al.
Published: (2025)
Fingerprinting Deep Neural Networks for Ownership Protection: An Analytical Approach
by: Yang, Guang, et al.
Published: (2026)
by: Yang, Guang, et al.
Published: (2026)
CUBA: Controlled Untargeted Backdoor Attack against Deep Neural Networks
by: Wu, Yinghao, et al.
Published: (2025)
by: Wu, Yinghao, et al.
Published: (2025)
Analysis and prevention of AI-based phishing email attacks
by: Eze, Chibuike Samuel, et al.
Published: (2024)
by: Eze, Chibuike Samuel, et al.
Published: (2024)
Protecting Deep Neural Network Intellectual Property with Chaos-Based White-Box Watermarking
by: B, Sangeeth, et al.
Published: (2025)
by: B, Sangeeth, et al.
Published: (2025)
DeepNcode: Encoding-Based Protection against Bit-Flip Attacks on Neural Networks
by: Velčický, Patrik, et al.
Published: (2024)
by: Velčický, Patrik, et al.
Published: (2024)
Navigating the Deep: End-to-End Extraction on Deep Neural Networks
by: Liu, Haolin, et al.
Published: (2025)
by: Liu, Haolin, et al.
Published: (2025)
Resilience and Security of Deep Neural Networks Against Intentional and Unintentional Perturbations: Survey and Research Challenges
by: Sayyed, Sazzad, et al.
Published: (2024)
by: Sayyed, Sazzad, et al.
Published: (2024)
Neural Honeytrace: Plug&Play Watermarking Framework against Model Extraction Attacks
by: Xu, Yixiao, et al.
Published: (2025)
by: Xu, Yixiao, et al.
Published: (2025)
AutoAdvExBench: Benchmarking autonomous exploitation of adversarial example defenses
by: Carlini, Nicholas, et al.
Published: (2025)
by: Carlini, Nicholas, et al.
Published: (2025)
Persistent Pre-Training Poisoning of LLMs
by: Zhang, Yiming, et al.
Published: (2024)
by: Zhang, Yiming, et al.
Published: (2024)
GraphIP-Bench: How Hard Is It to Steal a Graph Neural Network, and Can We Stop It?
by: Zhao, Kaixiang, et al.
Published: (2026)
by: Zhao, Kaixiang, et al.
Published: (2026)
LLMs unlock new paths to monetizing exploits
by: Carlini, Nicholas, et al.
Published: (2025)
by: Carlini, Nicholas, et al.
Published: (2025)
MALT Powers Up Adversarial Attacks
by: Melamed, Odelia, et al.
Published: (2024)
by: Melamed, Odelia, et al.
Published: (2024)
On Evaluating the Durability of Safeguards for Open-Weight LLMs
by: Qi, Xiangyu, et al.
Published: (2024)
by: Qi, Xiangyu, et al.
Published: (2024)
Defeating Prompt Injections by Design
by: Debenedetti, Edoardo, et al.
Published: (2025)
by: Debenedetti, Edoardo, et al.
Published: (2025)
Large-scale online deanonymization with LLMs
by: Lermen, Simon, et al.
Published: (2026)
by: Lermen, Simon, et al.
Published: (2026)
EIM-TRNG: Obfuscating Deep Neural Network Weights with Encoding-in-Memory True Random Number Generator via RowHammer
by: Zhou, Ranyang, et al.
Published: (2025)
by: Zhou, Ranyang, et al.
Published: (2025)
Certified Robustness to Clean-Label Poisoning Using Diffusion Denoising
by: Hong, Sanghyun, et al.
Published: (2024)
by: Hong, Sanghyun, et al.
Published: (2024)
Stealing User Prompts from Mixture of Experts
by: Yona, Itay, et al.
Published: (2024)
by: Yona, Itay, et al.
Published: (2024)
Towards Anonymous Neural Network Inference
by: Peiyuan, Liao
Published: (2025)
by: Peiyuan, Liao
Published: (2025)
Probabilistically Robust Watermarking of Neural Networks
by: Pautov, Mikhail, et al.
Published: (2024)
by: Pautov, Mikhail, et al.
Published: (2024)
Mapping Smarter, Not Harder: A Test-Time Reinforcement Learning Agent That Improves Without Labels or Model Updates
by: Tsao, Wen-Kwang, et al.
Published: (2025)
by: Tsao, Wen-Kwang, et al.
Published: (2025)
Adversarial Perturbations Cannot Reliably Protect Artists From Generative AI
by: Hönig, Robert, et al.
Published: (2024)
by: Hönig, Robert, et al.
Published: (2024)
Interpret the Predictions of Deep Networks via Re-Label Distillation
by: Hua, Yingying, et al.
Published: (2024)
by: Hua, Yingying, et al.
Published: (2024)
Neural Network Training on Encrypted Data with TFHE
by: Montero, Luis, et al.
Published: (2024)
by: Montero, Luis, et al.
Published: (2024)
Similar Items
-
Is the Hard-Label Cryptanalytic Model Extraction Really Polynomial?
by: Ito, Akira, et al.
Published: (2025) -
Hard-Label Cryptanalytic Extraction of Neural Network Models
by: Chen, Yi, et al.
Published: (2024) -
Delving into Cryptanalytic Extraction of PReLU Neural Networks
by: Chen, Yi, et al.
Published: (2025) -
A Divide-and-Conquer Strategy for Hard-Label Extraction of Deep Neural Networks via Side-Channel Attacks
by: Coqueret, Benoit, et al.
Published: (2024) -
Train to Defend: First Defense Against Cryptanalytic Neural Network Parameter Extraction Attacks
by: Kurian, Ashley, et al.
Published: (2025)