Demystifying Arch-hints for Model Extraction: An Attack in Unified Memory System

Zhendong Wang, Xiaoming Zeng, Xulong Tang +3

The deep neural network (DNN) models are deemed confidential due to their unique value in expensive training efforts, privacy-sensitive training data, and proprietary network chara…