首页|SwiftTheft:A Time-Efficient Model Extraction Attack Framework Against Cloud-Based Deep Neural Networks

SwiftTheft:A Time-Efficient Model Extraction Attack Framework Against Cloud-Based Deep Neural Networks

扫码查看
With the rise of artificial intelligence and cloud computing,machine-learning-as-a-service platforms,such as Google,Amazon,and IBM,have emerged to provide sophisticated tasks for cloud applications.These propri-etary models are vulnerable to model extraction attacks due to their commercial value.In this paper,we propose a time-efficient model extraction attack framework called SwiftTheft that aims to steal the functionality of cloud-based deep neural network models.We distinguish SwiftTheft from the existing works with a novel distribution estimation algorithm and reference model settings,finding the most informative query samples without querying the victim mod-el.The selected query samples can be applied to various cloud models with a one-time selection.We evaluate our proposed method through extensive experiments on three victim models and six datasets,with up to 16 models for each dataset.Compared to the existing attacks,SwiftTheft increases agreement(i.e.,similarity)by 8%while consum-ing 98%less selecting time.

Artificial intelligence securityModel extraction attacksDeep neural networks

Wenbin YANG、Xueluan GONG、Yanjiao CHEN、Qian WANG、Jianshuo DONG

展开 >

School of Cyber Science and Engineering,Wuhan University,Wuhan 430072,China

School of Computer Science,Wuhan University,Wuhan 430072,China

College of Electrical Engineering,Zhejiang University,Hangzhou 310058,China

National Key R&D Program of ChinaNSFCNSFC

2020AAA0107701U20B2049U21B2018

2024

电子学报(英文)

电子学报(英文)

CSTPCDEI
ISSN:1022-4653
年,卷(期):2024.33(1)
  • 27