92 citations · 119 across the 9 of their papers we have counts for
10 papers
When Rotation Bounds Nothing: Streaming Image Classifiers to Field Nodes Under Physical Capture
Daniel Gilkarov, Ran Dubin
Field nodes run image classifiers locally, exposing a first-class asset, the trained model, to theft. Trusted-execution enclaves, collaborative-inference splits, and encrypted stor…
HTTP REST API Structure Learning
Ran Dubin, Amit Dvir
Application Programming Interfaces (APIs) are essential in software development, enabling web services, mobile apps, and microservices. However, their widespread use introduces sig…
NeuPerm: Disrupting Malware Hidden in Neural Network Parameters by Leveraging Permutation Symmetry
Daniel Gilkarov, Ran Dubin
Pretrained deep learning model sharing holds tremendous value for researchers and enterprises alike. It allows them to apply deep learning by fine-tuning models at a fraction of th…
Model X-Ray: Detection of Hidden Malware in AI Model Weights using Few Shot Learning
Daniel Gilkarov, Ran Dubin
The potential for exploitation of AI models has increased due to the rapid advancement of Artificial Intelligence (AI) and the widespread use of platforms like Model Zoo for sharin…
Steganalysis of AI Models LSB Attacks
Daniel Gilkarov, Ran Dubin
Artificial intelligence has made significant progress in the last decade, leading to a rise in the popularity of model sharing. The model zoo ecosystem, a repository of pre-trained…
Disarming Steganography Attacks Inside Neural Network Models
Ran Dubin
Similar to the revolution of open source code sharing, Artificial Intelligence (AI) model sharing is gaining increased popularity. However, the fast adaptation in the industry, lac…
Open Image Content Disarm And Reconstruction
Eli Belkind, Ran Dubin, Amit Dvir
With the advance in malware technology, attackers create new ways to hide their malicious code from antivirus services. One way to obfuscate an attack is to use common files as cov…
Robust Machine Learning for Encrypted Traffic Classification
Amit Dvir, Yehonatan Zion, Jonathan Muehlstein +3
Desktops and laptops can be maliciously exploited to violate privacy. In this paper, we consider the daily battle between the passive attacker who is targeting a specific user agai…
Adaptation Logic for HTTP Dynamic Adaptive Streaming using Geo-Predictive Crowdsourcing
Ran Dubin, Amit Dvir, Ofir Pele +3
The increasing demand for video streaming services with high Quality of Experience (QoE) has prompted a lot of research on client-side adaptation logic approaches. However, most al…
I Know What You Saw Last Minute - Encrypted HTTP Adaptive Video Streaming Title Classification
Ran Dubin, Amit Dvir, Ofir Pele +1
Desktops and laptops can be maliciously exploited to violate privacy. There are two main types of attack scenarios: active and passive. In this paper, we consider the passive scena…