{"id":"https://openalex.org/W3213793813","doi":"https://doi.org/10.1109/sp46214.2022.9833743","title":"DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories","display_name":"DeepSteal: Advanced Model Extractions Leveraging Efficient Weight Stealing in Memories","publication_year":2022,"publication_date":"2022-05-01","ids":{"openalex":"https://openalex.org/W3213793813","doi":"https://doi.org/10.1109/sp46214.2022.9833743","mag":"3213793813"},"language":"en","primary_location":{"id":"doi:10.1109/sp46214.2022.9833743","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833743","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030138469","display_name":"Adnan Siraj Rakin","orcid":"https://orcid.org/0000-0002-6056-2625"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Adnan Siraj Rakin","raw_affiliation_strings":["Arizona State University,School of Electrical, Computer, and Energy Engineering,Tempe,AZ","School of Electrical, Computer, and Energy Engineering, Arizona State University, Tempe, AZ"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arizona State University,School of Electrical, Computer, and Energy Engineering,Tempe,AZ","institution_ids":["https://openalex.org/I55732556"]},{"raw_affiliation_string":"School of Electrical, Computer, and Energy Engineering, Arizona State University, Tempe, AZ","institution_ids":["https://openalex.org/I55732556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066717795","display_name":"Md Hafizul Islam Chowdhuryy","orcid":"https://orcid.org/0000-0002-6132-3343"},"institutions":[{"id":"https://openalex.org/I106165777","display_name":"University of Central Florida","ror":"https://ror.org/036nfer12","country_code":"US","type":"education","lineage":["https://openalex.org/I106165777"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Md Hafizul Islam Chowdhuryy","raw_affiliation_strings":["University of Central Florida,Department of Electrical and Computer Engineering,Orlando,FL","Department of Electrical and Computer Engineering, University of Central Florida, Orlando, FL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Central Florida,Department of Electrical and Computer Engineering,Orlando,FL","institution_ids":["https://openalex.org/I106165777"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Central Florida, Orlando, FL","institution_ids":["https://openalex.org/I106165777"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033685295","display_name":"Fan Yao","orcid":"https://orcid.org/0000-0002-0360-5641"},"institutions":[{"id":"https://openalex.org/I106165777","display_name":"University of Central Florida","ror":"https://ror.org/036nfer12","country_code":"US","type":"education","lineage":["https://openalex.org/I106165777"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fan Yao","raw_affiliation_strings":["University of Central Florida,Department of Electrical and Computer Engineering,Orlando,FL","Department of Electrical and Computer Engineering, University of Central Florida, Orlando, FL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Central Florida,Department of Electrical and Computer Engineering,Orlando,FL","institution_ids":["https://openalex.org/I106165777"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Central Florida, Orlando, FL","institution_ids":["https://openalex.org/I106165777"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047916979","display_name":"Deliang Fan","orcid":"https://orcid.org/0000-0002-7989-6297"},"institutions":[{"id":"https://openalex.org/I55732556","display_name":"Arizona State University","ror":"https://ror.org/03efmqc40","country_code":"US","type":"education","lineage":["https://openalex.org/I55732556"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Deliang Fan","raw_affiliation_strings":["Arizona State University,School of Electrical, Computer, and Energy Engineering,Tempe,AZ","School of Electrical, Computer, and Energy Engineering, Arizona State University, Tempe, AZ"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arizona State University,School of Electrical, Computer, and Energy Engineering,Tempe,AZ","institution_ids":["https://openalex.org/I55732556"]},{"raw_affiliation_string":"School of Electrical, Computer, and Energy Engineering, Arizona State University, Tempe, AZ","institution_ids":["https://openalex.org/I55732556"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":104,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1157","last_page":"1174"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9851999878883362,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8155841827392578},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5679988861083984},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5222466588020325},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5148155093193054},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5039121508598328},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.4703129827976227},{"id":"https://openalex.org/keywords/information-sensitivity","display_name":"Information sensitivity","score":0.46256905794143677},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.42341309785842896},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.4207318425178528},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4196138381958008},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38899219036102295},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.38585546612739563},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.20911476016044617}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8155841827392578},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5679988861083984},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5222466588020325},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5148155093193054},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5039121508598328},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.4703129827976227},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.46256905794143677},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.42341309785842896},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.4207318425178528},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4196138381958008},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38899219036102295},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38585546612739563},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.20911476016044617},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46214.2022.9833743","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46214.2022.9833743","pdf_url":null,"source":{"id":"https://openalex.org/S4363606603","display_name":"2022 IEEE Symposium on Security and Privacy (SP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":123,"referenced_works":["https://openalex.org/W1427174644","https://openalex.org/W1517076159","https://openalex.org/W1539287725","https://openalex.org/W1677182931","https://openalex.org/W1686810756","https://openalex.org/W1934458198","https://openalex.org/W2013066047","https://openalex.org/W2067713319","https://openalex.org/W2101281312","https://openalex.org/W2157116240","https://openalex.org/W2163563130","https://openalex.org/W2194775991","https://openalex.org/W2294710185","https://openalex.org/W2401231614","https://openalex.org/W2408141691","https://openalex.org/W2461943168","https://openalex.org/W2491829854","https://openalex.org/W2533523411","https://openalex.org/W2549139847","https://openalex.org/W2603766943","https://openalex.org/W2605470470","https://openalex.org/W2615272193","https://openalex.org/W2746600820","https://openalex.org/W2769824527","https://openalex.org/W2791034507","https://openalex.org/W2795015774","https://openalex.org/W2808195004","https://openalex.org/W2811276992","https://openalex.org/W2889929196","https://openalex.org/W2891810898","https://openalex.org/W2896078964","https://openalex.org/W2899469948","https://openalex.org/W2900966859","https://openalex.org/W2906869444","https://openalex.org/W2913266441","https://openalex.org/W2934166125","https://openalex.org/W2939057911","https://openalex.org/W2944977718","https://openalex.org/W2945528222","https://openalex.org/W2949090999","https://openalex.org/W2949736877","https://openalex.org/W2951574208","https://openalex.org/W2953328958","https://openalex.org/W2962726564","https://openalex.org/W2962847335","https://openalex.org/W2963303354","https://openalex.org/W2963485691","https://openalex.org/W2963560987","https://openalex.org/W2964137095","https://openalex.org/W2964253222","https://openalex.org/W2964318098","https://openalex.org/W2965565691","https://openalex.org/W2974891422","https://openalex.org/W2981860227","https://openalex.org/W2995091922","https://openalex.org/W2995955028","https://openalex.org/W2996834813","https://openalex.org/W3006253591","https://openalex.org/W3008983606","https://openalex.org/W3015367674","https://openalex.org/W3015685940","https://openalex.org/W3015806656","https://openalex.org/W3025224414","https://openalex.org/W3034796035","https://openalex.org/W3035682985","https://openalex.org/W3036001318","https://openalex.org/W3046609696","https://openalex.org/W3046853140","https://openalex.org/W3049152512","https://openalex.org/W3049515540","https://openalex.org/W3081488247","https://openalex.org/W3082761341","https://openalex.org/W3090625831","https://openalex.org/W3094357937","https://openalex.org/W3102631365","https://openalex.org/W3102836279","https://openalex.org/W3103932910","https://openalex.org/W3114482311","https://openalex.org/W3117764131","https://openalex.org/W3118280765","https://openalex.org/W3118608800","https://openalex.org/W3132215038","https://openalex.org/W3166756206","https://openalex.org/W3180021682","https://openalex.org/W3201340515","https://openalex.org/W3207641784","https://openalex.org/W3210462562","https://openalex.org/W3213827028","https://openalex.org/W3214186397","https://openalex.org/W4233119454","https://openalex.org/W4288057791","https://openalex.org/W4288117700","https://openalex.org/W4293846201","https://openalex.org/W4295312788","https://openalex.org/W6628261430","https://openalex.org/W6637373629","https://openalex.org/W6712237015","https://openalex.org/W6713132643","https://openalex.org/W6714069269","https://openalex.org/W6723169266","https://openalex.org/W6728841359","https://openalex.org/W6729342207","https://openalex.org/W6739868092","https://openalex.org/W6749173734","https://openalex.org/W6753937820","https://openalex.org/W6756176480","https://openalex.org/W6758096801","https://openalex.org/W6759129252","https://openalex.org/W6760237559","https://openalex.org/W6762685017","https://openalex.org/W6762840122","https://openalex.org/W6766787143","https://openalex.org/W6766978945","https://openalex.org/W6771898115","https://openalex.org/W6772109348","https://openalex.org/W6775078712","https://openalex.org/W6775611046","https://openalex.org/W6777991474","https://openalex.org/W6780010867","https://openalex.org/W6784730007","https://openalex.org/W6788597507","https://openalex.org/W6802167643","https://openalex.org/W6802337723"],"related_works":["https://openalex.org/W4288075818","https://openalex.org/W189451467","https://openalex.org/W2077568170","https://openalex.org/W3200138464","https://openalex.org/W2143793665","https://openalex.org/W42776009","https://openalex.org/W2138926267","https://openalex.org/W3010548582","https://openalex.org/W3167747526","https://openalex.org/W4287595293"],"abstract_inverted_index":{"Recent":[0],"advancements":[1],"in":[2,11,59],"Deep":[3],"Neural":[4],"Networks":[5],"(DNNs)":[6],"have":[7,28],"enabled":[8],"widespread":[9],"deployment":[10],"multiple":[12],"security-sensitive":[13],"domains.":[14],"The":[15,189],"need":[16],"for":[17,37,78,127,205],"resource-intensive":[18],"training":[19,26,144],"and":[20,133,159,183],"the":[21,32,42,79,83,111,116,153,165,171,206,223],"use":[22],"of":[23,41,85,164],"valuable":[24],"domain-specific":[25],"data":[27],"made":[29],"these":[30],"models":[31],"top":[33],"intellectual":[34],"property":[35],"(IP)":[36],"model":[38,49,69,143,173,192,213],"owners.":[39],"One":[40],"major":[43],"threats":[44],"to":[45,55,130,221],"DNN":[46,60,75,128,185],"privacy":[47],"is":[48],"extraction":[50,70,105,174],"attacks":[51],"where":[52],"adversaries":[53],"attempt":[54],"steal":[56],"sensitive":[57],"information":[58,104,117,157],"models.":[61],"In":[62],"this":[63],"work,":[64],"we":[65,98,138],"propose":[66,139],"an":[67],"advanced":[68],"framework":[71,175],"DeepSteal":[72,92],"that":[73],"steals":[74],"weights":[76],"remotely":[77],"first":[80],"time":[81],"with":[82,146],"aid":[84],"a":[86,100,140,161],"memory":[87],"side-channel":[88],"attack.":[89],"Our":[90],"proposed":[91,172],"comprises":[93],"two":[94],"key":[95],"stages.":[96],"Firstly,":[97],"develop":[99],"new":[101],"weight":[102,135,149],"bit":[103,156],"method,":[106],"called":[107],"HammerLeak,":[108],"through":[109],"adopting":[110],"rowhammer-based":[112],"fault":[113],"technique":[114],"as":[115,237],"leakage":[118],"vector.":[119],"HammerLeak":[120],"leverages":[121,152],"several":[122],"novel":[123,141],"system-level":[124],"techniques":[125],"tailored":[126],"applications":[129],"enable":[131],"fast":[132],"efficient":[134],"stealing.":[136],"Secondly,":[137],"substitute":[142,162,191,212],"algorithm":[145],"Mean":[147],"Clustering":[148],"penalty,":[150],"which":[151],"partial":[154],"leaked":[155],"effectively":[158],"generates":[160],"prototype":[163],"target":[166],"victim":[167,224],"model.":[168,225],"We":[169],"evaluate":[170],"on":[176,201],"three":[177],"popular":[178],"image":[179],"datasets":[180],"(e.g.,":[181,187,242],"CIFAR-10/100/GTSRB)":[182],"four":[184],"architectures":[186],"ResNet-18/34/Wide-ResNetNGG-11).":[188],"extracted":[190,211],"has":[193],"successfully":[194],"achieved":[195],"more":[196],"than":[197],"90%":[198],"test":[199,233],"accuracy":[200,234],"deep":[202],"residual":[203],"networks":[204],"CIFAR-10":[207],"dataset.":[208],"Moreover,":[209],"our":[210],"could":[214],"also":[215],"generate":[216],"effective":[217],"adversarial":[218,239],"input":[219,240],"samples":[220],"fool":[222],"Notably,":[226],"it":[227],"achieves":[228],"similar":[229],"performance":[230],"(i.e.,":[231],"~1-2%":[232],"under":[235],"attack)":[236],"white-box":[238],"attack":[241],"PGD/Trades).":[243]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":39},{"year":2024,"cited_by_count":34},{"year":2023,"cited_by_count":20},{"year":2022,"cited_by_count":5}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}