{"id":"https://openalex.org/W4312473281","doi":"https://doi.org/10.1109/ijcnn55064.2022.9892545","title":"NeuroUnlock: Unlocking the Architecture of Obfuscated Deep Neural Networks","display_name":"NeuroUnlock: Unlocking the Architecture of Obfuscated Deep Neural Networks","publication_year":2022,"publication_date":"2022-07-18","ids":{"openalex":"https://openalex.org/W4312473281","doi":"https://doi.org/10.1109/ijcnn55064.2022.9892545"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn55064.2022.9892545","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn55064.2022.9892545","pdf_url":null,"source":{"id":"https://openalex.org/S4363607707","display_name":"2022 International Joint Conference on Neural Networks (IJCNN)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044553058","display_name":"Mahya Morid Ahmadi","orcid":null},"institutions":[{"id":"https://openalex.org/I145847075","display_name":"TU Wien","ror":"https://ror.org/04d836q62","country_code":"AT","type":"education","lineage":["https://openalex.org/I145847075"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Mahya Morid Ahmadi","raw_affiliation_strings":["Technische Universitat Wien (TU Wien),Vienna,Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universitat Wien (TU Wien),Vienna,Austria","institution_ids":["https://openalex.org/I145847075"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030348801","display_name":"Lilas Alrahis","orcid":"https://orcid.org/0000-0001-9932-6833"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Lilas Alrahis","raw_affiliation_strings":["New York University Abu Dhabi (NYUAD),Division of Engineering,Abu Dhabi,United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University Abu Dhabi (NYUAD),Division of Engineering,Abu Dhabi,United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050516307","display_name":"Alessio Colucci","orcid":"https://orcid.org/0000-0003-1805-750X"},"institutions":[{"id":"https://openalex.org/I145847075","display_name":"TU Wien","ror":"https://ror.org/04d836q62","country_code":"AT","type":"education","lineage":["https://openalex.org/I145847075"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Alessio Colucci","raw_affiliation_strings":["Technische Universitat Wien (TU Wien),Vienna,Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universitat Wien (TU Wien),Vienna,Austria","institution_ids":["https://openalex.org/I145847075"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059987567","display_name":"Ozgur Sinanoglu","orcid":"https://orcid.org/0000-0003-0782-0397"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Ozgur Sinanoglu","raw_affiliation_strings":["New York University Abu Dhabi (NYUAD),Division of Engineering,Abu Dhabi,United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University Abu Dhabi (NYUAD),Division of Engineering,Abu Dhabi,United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005190949","display_name":"Muhammad Shafique","orcid":"https://orcid.org/0000-0002-2607-8135"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Muhammad Shafique","raw_affiliation_strings":["New York University Abu Dhabi (NYUAD),Division of Engineering,Abu Dhabi,United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"New York University Abu Dhabi (NYUAD),Division of Engineering,Abu Dhabi,United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"01","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9740999937057495,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9587000012397766,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8150577545166016},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6804103255271912},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.6360701322555542},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5223240256309509},{"id":"https://openalex.org/keywords/deep-neural-networks","display_name":"Deep neural networks","score":0.5028552412986755},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4443495571613312},{"id":"https://openalex.org/keywords/network-architecture","display_name":"Network architecture","score":0.41821837425231934},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.39263221621513367},{"id":"https://openalex.org/keywords/computer-architecture","display_name":"Computer architecture","score":0.37464165687561035},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.36874839663505554},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.32094788551330566},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.24667403101921082},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.20522168278694153}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8150577545166016},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6804103255271912},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.6360701322555542},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5223240256309509},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.5028552412986755},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4443495571613312},{"id":"https://openalex.org/C193415008","wikidata":"https://www.wikidata.org/wiki/Q639681","display_name":"Network architecture","level":2,"score":0.41821837425231934},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.39263221621513367},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.37464165687561035},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36874839663505554},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.32094788551330566},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.24667403101921082},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.20522168278694153},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn55064.2022.9892545","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn55064.2022.9892545","pdf_url":null,"source":{"id":"https://openalex.org/S4363607707","display_name":"2022 International Joint Conference on Neural Networks (IJCNN)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1522301498","https://openalex.org/W1545698365","https://openalex.org/W1686810756","https://openalex.org/W1988374166","https://openalex.org/W1994616650","https://openalex.org/W2001496424","https://openalex.org/W2064675550","https://openalex.org/W2147758029","https://openalex.org/W2147800946","https://openalex.org/W2163605009","https://openalex.org/W2206222117","https://openalex.org/W2804032941","https://openalex.org/W2952104986","https://openalex.org/W2963212250","https://openalex.org/W2981708954","https://openalex.org/W3035682985","https://openalex.org/W3102836279","https://openalex.org/W3114953961","https://openalex.org/W3118608800","https://openalex.org/W3127436526","https://openalex.org/W3135970545","https://openalex.org/W3183268554","https://openalex.org/W3213793813","https://openalex.org/W4288117700","https://openalex.org/W4295312788","https://openalex.org/W6631190155","https://openalex.org/W6637373629","https://openalex.org/W6684191040","https://openalex.org/W6751349269","https://openalex.org/W6764550947","https://openalex.org/W6766978945","https://openalex.org/W6775078712"],"related_works":["https://openalex.org/W4224216661","https://openalex.org/W3210347767","https://openalex.org/W98994209","https://openalex.org/W67940504","https://openalex.org/W2066014542","https://openalex.org/W2024170198","https://openalex.org/W2152144666","https://openalex.org/W1819617256","https://openalex.org/W4308699695","https://openalex.org/W2596984206"],"abstract_inverted_index":{"The":[0],"advancements":[1],"of":[2,25,31,50,92,107,162,168,191,244,275],"deep":[3],"neural":[4],"networks":[5],"(DNNs)":[6],"have":[7,36],"led":[8],"to":[9,61,124,253,284],"their":[10],"deployment":[11],"in":[12,119,223,250],"diverse":[13],"settings,":[14],"including":[15],"safety":[16],"and":[17,33,74,115,148,172,205,278,292],"security-critical":[18],"applications.":[19],"As":[20],"a":[21,51,93,120,130,140,215,220,232,263],"result,":[22],"the":[23,29,48,64,89,105,145,154,160,166,177,189,201,210,224,237,241,245,257,272,276,285,290,293],"characteristics":[24],"these":[26,125],"models":[27,69],"(e.g.,":[28,56],"architecture":[30,49,83,167,190],"layers":[32],"weight":[34],"values/distributions)":[35],"become":[37],"sensitive":[38],"intellectual":[39],"properties":[40],"that":[41,143,230],"require":[42],"protection":[43],"from":[44],"malicious":[45],"users.":[46],"Extracting":[47],"DNN":[52,79,95,109,122,156,217,267],"through":[53],"leaky":[54],"side-channels":[55],"memory":[57],"access)":[58],"allows":[59],"adversaries":[60],"(i)":[62],"clone":[63],"model":[65,142],"(i.e.,":[66],"build":[67],"proxy":[68],"with":[70,218],"similar":[71],"accuracy":[72],"profiles),":[73],"(ii)":[75],"craft":[76],"adversarial":[77,234,246],"attacks.":[78,126],"obfuscation":[80,110,146,277],"thwarts":[81],"side-channel-based":[82],"stealing":[84],"(SCAS)":[85],"attacks":[86],"by":[87,164,248],"altering":[88],"run-time":[90],"traces":[91],"given":[94,121],"while":[96],"preserving":[97],"its":[98],"functionality.":[99],"In":[100],"this":[101],"work,":[102],"we":[103,261],"expose":[104],"vulnerability":[106],"state-of-the-art":[108],"methods":[111],"(based":[112],"on":[113,176,236,256],"predictable":[114],"reversible":[116],"modifications":[117],"employed":[118],"architecture)":[123],"We":[127,158,227,288],"present":[128],"NeuroUnlock,":[129],"novel":[131,264],"SCAS":[132],"attack":[133,235,247],"against":[134],"obfuscated":[135,173,194,258],"DNNs.":[136],"Our":[137],"NeuroUnlock":[138,163,187,212,286,291],"employs":[139],"sequence-to-sequence":[141],"learns":[144],"procedure":[147],"automatically":[149,213],"reverts":[150],"it,":[151],"thereby":[152],"recovering":[153,165,209],"original":[155],"architecture.":[157],"demonstrate":[159],"effectiveness":[161],"200":[169],"randomly":[170],"generated":[171],"DNNs":[174,239],"running":[175],"Nvidia":[178],"RTX":[179],"2080":[180],"TI":[181],"graphics":[182],"processing":[183],"unit":[184],"(GPU).":[185],"Moreover,":[186],"recovers":[188],"various":[192],"other":[193],"(and":[195],"publicly":[196],"available)":[197],"DNNs,":[198],"such":[199],"as":[200,295],"VGG-11,":[202],"VGG-13,":[203],"ResNet-20,":[204],"ResNet-32":[206],"networks.":[207],"After":[208],"architecture,":[211],"builds":[214],"near-equivalent":[216],"only":[219],"1.4%":[221],"drop":[222],"testing":[225],"accuracy.":[226],"further":[228],"show":[229],"launching":[231,254],"subsequent":[233],"recovered":[238],"boosts":[240],"success":[242],"rate":[243],"51.7%":[249],"average":[251],"compared":[252],"it":[255],"versions.":[259],"Additionally,":[260],"propose":[262],"methodology":[265],"for":[266],"obfuscation,":[268],"ReDLock,":[269],"which":[270],"eradicates":[271],"deterministic":[273],"nature":[274],"achieves":[279],"2.16":[280],"x":[281],"more":[282],"resilience":[283],"attack.":[287],"release":[289],"ReDLock":[294],"open-source":[296],"frameworks":[297],"<sup":[298,301],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[299,302],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">1</sup>":[300,303],"https://github.com/Mahya-Ahmadi/NeuroUnlock.":[304]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":5}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}