A new research paper challenges the assumption that extracting information from deep neural networks (DNNs) is always a polynomial-time process. While previous work suggested that hard-label extraction attacks, which only reveal the final classification, are efficient, this paper argues that the complexity increases with network depth. The authors propose a novel cross-layer extraction method to overcome these limitations. AI
IMPACT Challenges the efficiency assumptions for model extraction attacks, potentially impacting intellectual property protection for DNNs.
RANK_REASON Academic paper published on arXiv discussing theoretical limitations of model extraction attacks on deep neural networks. [lever_c_demoted from research: ic=1 ai=1.0]
- Akira Ito
- Asiacrypt 2024
- Carlini et al.
- Crypto 2020
- Deep Neural Networks
- Eurocrypt 2024
- Eurocrypt 2025
- hard-label extraction
- ReLU
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →