Matryoshka: Stealing Functionality of Private ML Data by Hiding Models in Model

Xudong Pan, Yifan Yan, Shengyao Zhang +2

In this paper, we present a novel insider attack called Matryoshka, which employs an irrelevant scheduled-to-publish DNN model as a carrier model for covert transmission of multipl…