Peering Inside the Black-Box: Long-Range and Scalable Model Architecture Snooping via GPU Electromagnetic Side-Channel - NDSS Symposium
www.ndss-symposium.org

Original Reddit post

As deep neural networks (DNNs) are increasingly adopted in safety-critical applications such as autonomous driving and face recognition, they have also become targets for adversarial attacks. However, confidential information of DNNs-including model architecture – is typically hidden from attackers. As a result, adversarial attacks are often launched in black-box settings, which limits their effectiveness. In this paper, we propose ModelSpy , a stealthy DNN architecture snooping attack based on GPU electromagnetic (EM) leakage. submitted by /u/n035

Originally posted by u/n035 on r/ArtificialInteligence