ES Attack: Model Stealing against Deep Neural Networks without Data Hurdles. (arXiv:2009.09560v2 [cs.CV] UPDATED)

Web: http://arxiv.org/abs/2009.09560

Deep neural networks (DNNs) have become the essential components for various
commercialized machine learning services, such as Machine Learning as a Service
(MLaaS). Recent studies show that machine learning services face severe privacy
threats - well-trained DNNs owned by MLaaS providers can be stolen through
public APIs, namely model stealing attacks. However, most existing works
undervalued the impact of such attacks, where a successful attack has to
acquire confidential training data or auxiliary data regarding the victim DNN.
In this …

arxiv cv data deep model networks neural neural networks