A Protection against the Extraction of Neural Network Models

Hervé Chabanne, Vincent Despiegel, Linda Guiga

Given oracle access to a Neural Network (NN), it is possible to extract its underlying model. We here introduce a protection by adding parasitic layers which keep the underlying NN…