Activation Functions Considered Harmful: Recovering Neural Network Weights through Controlled Channels

Jesse Spielman, David Oswald, Mark Ryan +1

With high-stakes machine learning applications increasingly moving to untrusted end-user or cloud environments, safeguarding pre-trained model parameters becomes essential for prot…