arXiv Machine Learning
Is the Hard-Label Cryptanalytic Model Extraction Really Polynomial?
Read the original on arXiv Machine Learning →The Flow has not summarised this story yet — read it at arXiv Machine Learning.
Related stories
arXiv Machine Learning
Sep 21
End-to-End Hard-Label Cryptanalytic Model Extraction Using Efficient Sign Recovery
arXiv:2609.21941v1 Announce Type: cross Abstract: The importance of deep neural networks (DNNs) is widely recognized, and the parameters obtained through training are regarded as valuable assets. Rec...
arXiv Machine Learning
Sep 10
Backdoor Channels Hidden in Latent Space: Extending Cryptographic Undetectability to Modern Neural Networks
arXiv:2605.13214v3 Announce Type: replace-cross Abstract: Recent cryptographic results establish that neural networks can be backdoored such that no efficient algorithm can distinguish them from a cl...
arXiv Machine Learning
Jul 7
GDBR: Label Recovery Attack Against Partial Gradient Encryption in Federated Learning
arXiv:2412. 12640v2 Announce Type: replace Abstract: The increasing demand for data privacy, alongside the benefits of aggregating data from networked devices, has catalyzed the emergence of federated learning (FL).
arXiv Computer Vision
Sep 21
Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses
The paper "Privacy Leakage on DNNs: A Survey of Model Inversion Attacks and Defenses" provides a comprehensive review of model inversion (MI) attacks that exploit trained deep neural networks to reconstruct private training data. It traces the evolution of MI from early machine‑learning contexts to recent DNN‑based attacks across various modalities and learning tasks, offering a detailed taxonomy and comparative analysis of both attacks and defenses. The authors also present an open‑source toolbox on GitHub to support further research in this area.
arXiv Machine Learning
Aug 6
One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP
arXiv:2505. 19840v3 Announce Type: replace-cross Abstract: Deep Neural Networks (DNNs) have achieved widespread success yet remain prone to adversarial attacks.
arXiv Machine Learning
Jun 8
ADAGE: Active Defenses Against GNN Extraction
arXiv:2503. 00065v4 Announce Type: replace-cross Abstract: Graph Neural Networks (GNNs) achieve high performance in various real-world applications, such as drug discovery, traffic states prediction, and recommendation systems.