When Not to Classify: Detection of Reverse Engineering Attacks on DNN Image Classifiers

Yujia Wang, David J. Miller, George Kesidis

This paper addresses detection of a reverse engineering (RE) attack targeting a deep neural network (DNN) image classifier; by querying, RE's aim is to discover the classifier's de…