arXiv Machine Learning

Is the Hard-Label Cryptanalytic Model Extraction Really Polynomial?

arXiv Computer Vision
Sep 21

Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses

The paper "Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses" provides a comprehensive review of model inversion (MI) attacks that exploit trained deep neural networks to reconstruct private training data. It traces the evolution of MI from early machine‑learning contexts to recent DNN‑based attacks across various modalities and learning tasks, offering a detailed taxonomy and comparative analysis of both attacks and defenses. The authors also present an open‑source toolbox on GitHub to support further research in this area.

By Hao Fang, Yixiang Qiu, Hongyao Yu, Wenbo Yu, Jiawei Kong, Baoli Chong, Bin Chen, Xuan Wang, Shu-Tao Xia, Ke Xu
arXiv Machine Learning
Jun 8

ADAGE: Active Defenses Against GNN Extraction

arXiv:2503. 00065v4 Announce Type: replace-cross Abstract: Graph Neural Networks (GNNs) achieve high performance in various real-world applications, such as drug discovery, traffic states prediction, and recommendation systems.

By Jing Xu, Franziska Boenisch, Adam Dziedzic
arXiv Machine Learning
4d ago

Why Backdooring Neural Networks is so Easy?

arXiv:2609.36117v1 Announce Type: new Abstract: Securing modern AI systems against backdoor attacks remains an open challenge and requires fundamentally principled estimates of the adversary's budget...

By Issam Seddik, Mohamed El Amine Seddik
arXiv Machine Learning
Sep 16

Do LLMs Make Neural Distinguishers Wise?

The paper investigates whether large language models (LLMs) can enhance neural distinguishers, a cryptanalysis technique that uses machine learning to recover secret keys from plaintext–ciphertext pairs. Experiments on SPECK-32/64 show that LLM-based distinguishers do not outperform traditional ResNet models, that difference choice loses effectiveness at higher rounds, and that incorporating XOR operation results into the prompt significantly boosts LLM performance.

By Tatsuya Sakagami, Masashi Hisai, Naoto Yanai