{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,4]],"date-time":"2026-08-04T08:10:52Z","timestamp":1785831052299,"version":"3.56.0"},"publisher-location":"Cham","reference-count":29,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032253323","type":"print"},{"value":"9783032253330","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-25333-0_17","type":"book-chapter","created":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T22:42:40Z","timestamp":1778020960000},"page":"482-512","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Navigating the\u00a0Deep: End-to-End Extraction on\u00a0Deep Neural Networks"],"prefix":"10.1007","author":[{"given":"Haolin","family":"Liu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Adrien","family":"Siproudhis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Samuel","family":"Experton","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peter","family":"Lorenz","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christina","family":"Boura","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Thomas","family":"Peyrin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,5,6]]},"reference":[{"key":"17_CR1","unstructured":"Google cloud platform. Website. https:\/\/cloud.google.com\/. Accessed 12 Feb 2025"},{"key":"17_CR2","unstructured":"Advanced Encryption Standard (AES). National Institute of Standards and Technology, NIST FIPS PUB 197, U.S. Department of Commerce (2001)"},{"key":"17_CR3","unstructured":"Batina, L., Bhasin, S., Jap, D., Picek, S.: $$\\{$$CSI$$\\}$$$$\\{$$NN$$\\}$$: reverse engineering of neural network architectures through electromagnetic side channel. In: 28th USENIX Security Symposium (USENIX Security 2019), pp. 515\u2013532 (2019)"},{"key":"17_CR4","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1007\/3-540-38424-3_1","volume-title":"Advances in Cryptology-CRYPT0\u2019 90","author":"E Biham","year":"1991","unstructured":"Biham, E., Shamir, A.: Differential cryptanalysis of DES-like cryptosystems. In: Menezes, A.J., Vanstone, S.A. (eds.) CRYPTO 1990. LNCS, vol. 537, pp. 2\u201321. Springer, Heidelberg (1991). https:\/\/doi.org\/10.1007\/3-540-38424-3_1"},{"key":"17_CR5","unstructured":"Bishop: Bishop Book (2025). https:\/\/www.bishopbook.com\/. Accessed 12 Feb 2025"},{"key":"17_CR6","doi-asserted-by":"publisher","unstructured":"Canales-Mart\u00ednez, I.A., Ch\u00e1vez-Saab, J., Hambitzer, A., Rodr\u00edguez-Henr\u00edquez, F., Satpute, N., Shamir, A.: Polynomial time cryptanalytic extraction of neural network models. In: Joye, M., Leander, G. (eds.) EUROCRYPT\u00a02024, Part\u00a0III. LNCS, vol. 14653, pp. 3\u201333. Springer, Cham (2024). https:\/\/doi.org\/10.1007\/978-3-031-58734-4_1","DOI":"10.1007\/978-3-031-58734-4_1"},{"key":"17_CR7","doi-asserted-by":"publisher","unstructured":"Carlini, N., Ch\u00e1vez-Saab, J., Hambitzer, A., Rodr\u00edguez-Henr\u00edquez, F., Shamir, A.: Polynomial time cryptanalytic extraction of deep neural networks in the hard-label setting. In: Fehr, S., Fouque, P.-A. (eds.) EUROCRYPT\u00a02025, Part\u00a0I. LNCS, vol. 15601, pp. 364\u2013396. Springer, Cham (2025). https:\/\/doi.org\/10.1007\/978-3-031-91107-1_13","DOI":"10.1007\/978-3-031-91107-1_13"},{"key":"17_CR8","doi-asserted-by":"publisher","unstructured":"Carlini, N., Jagielski, M., Mironov, I.: Cryptanalytic extraction of neural network models. In: Micciancio, D., Ristenpart, T. (eds.) CRYPTO\u00a02020, Part\u00a0III. LNCS, vol. 12172, pp. 189\u2013218. Springer, Cham (2020). https:\/\/doi.org\/10.1007\/978-3-030-56877-1_7","DOI":"10.1007\/978-3-030-56877-1_7"},{"key":"17_CR9","doi-asserted-by":"publisher","unstructured":"Chen, Y., Dong, X., Guo, J., Shen, Y., Wang, A., Wang, X.: Hard-label cryptanalytic extraction of neural network models. In: Chung, K.M., Sasaki, Y. (eds.) ASIACRYPT\u00a02024, Part\u00a0VIII. LNCS, vol. 15491, pp. 207\u2013236. Springer, Singapore (2024). https:\/\/doi.org\/10.1007\/978-981-96-0944-4_7","DOI":"10.1007\/978-981-96-0944-4_7"},{"key":"17_CR10","unstructured":"Daniely, A., Granot, E.: An exact poly-time membership-queries algorithm for extracting a three-layer relu network. In: The Eleventh International Conference on Learning Representations, ICLR 2023, Kigali, Rwanda, 1\u20135 May 2023. OpenReview.net (2023). https:\/\/openreview.net\/forum?id=-CoNloheTs"},{"issue":"3","key":"17_CR11","doi-asserted-by":"publisher","first-page":"507","DOI":"10.4171\/rmi\/160","volume":"10","author":"C Fefferman","year":"1994","unstructured":"Fefferman, C., et al.: Reconstructing a neural net from its output. Revista Matem\u00e1tica Iberoamericana 10(3), 507\u2013556 (1994)","journal-title":"Revista Matem\u00e1tica Iberoamericana"},{"key":"17_CR12","doi-asserted-by":"crossref","unstructured":"Foerster, H., Mullins, R., Shumailov, I., Hayes, J.: Beyond slow signs in high-fidelity model extraction. Neurips abs\/2406.10011 (2024). https:\/\/api.semanticscholar.org\/CorpusID:270521873","DOI":"10.52202\/079017-0615"},{"key":"17_CR13","unstructured":"Jagielski, M., Carlini, N., Berthelot, D., Kurakin, A., Papernot, N.: High accuracy and high fidelity extraction of neural networks. In: Capkun, S., Roesner, F. (eds.) USENIX Security 2020, pp. 1345\u20131362. USENIX Association (2020)"},{"key":"17_CR14","unstructured":"Jagielski, M., Carlini, N., Berthelot, D., Kurakin, A., Papernot, N.: High accuracy and high fidelity extraction of neural networks. In: 29th USENIX Security Symposium (USENIX Security 2020), pp. 1345\u20131362 (2020)"},{"key":"17_CR15","unstructured":"Krizhevsky, A., Nair, V., Hinton, G.: CIFAR-10 and CIFAR-100 datasets, vol. 6, no. 1, p. 1 (2009). https:\/\/www.cs.toronto.edu\/kriz\/cifar.html"},{"key":"17_CR16","unstructured":"LeCun, Y., et al.: Handwritten digit recognition with a back-propagation network. In: Touretzky, D. (ed.) Advances in Neural Information Processing Systems, vol.\u00a02. Morgan-Kaufmann (1989)"},{"key":"17_CR17","doi-asserted-by":"crossref","unstructured":"Lowd, D., Meek, C.: Adversarial learning. In: Proceedings of the Eleventh ACM SIGKDD International Conference on Knowledge Discovery in Data Mining, pp. 641\u2013647 (2005)","DOI":"10.1145\/1081870.1081950"},{"key":"17_CR18","unstructured":"Martinelli, F., Simsek, B., Gerstner, W., Brea, J.: Expand-and-cluster: parameter recovery of neural networks. In: Forty-First International Conference on Machine Learning, ICML 2024, Vienna, Austria, 21\u201327 July 2024. OpenReview.net (2024). https:\/\/openreview.net\/forum?id=3MIuPRJYwf"},{"key":"17_CR19","doi-asserted-by":"crossref","unstructured":"Milli, S., Schmidt, L., Dragan, A.D., Hardt, M.: Model reconstruction from model explanations. In: Proceedings of the Conference on Fairness, Accountability, and Transparency, pp.\u00a01\u20139 (2019)","DOI":"10.1145\/3287560.3287562"},{"key":"17_CR20","unstructured":"Nair, V., Hinton, G.E.: Rectified linear units improve restricted Boltzmann machines. In: International Conference on Machine Learning (2010). https:\/\/api.semanticscholar.org\/CorpusID:15539264"},{"issue":"14s","key":"17_CR21","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3595292","volume":"55","author":"D Oliynyk","year":"2023","unstructured":"Oliynyk, D., Mayer, R., Rauber, A.: I know what you trained last summer: a survey on stealing machine learning models and defenses. ACM Comput. Surv. 55(14s), 1\u201341 (2023)","journal-title":"ACM Comput. Surv."},{"key":"17_CR22","doi-asserted-by":"crossref","unstructured":"Papernot, N., Mcdaniel, P., Goodfellow, I.J., Jha, S., Celik, Z.B., Swami, A.: Practical black-box attacks against machine learning. In: Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security (2016). https:\/\/api.semanticscholar.org\/CorpusID:1090603","DOI":"10.1145\/3052973.3053009"},{"key":"17_CR23","doi-asserted-by":"crossref","unstructured":"Reith, R.N., Schneider, T., Tkachenko, O.: Efficiently stealing your machine learning models. In: Proceedings of the 18th ACM Workshop on Privacy in the Electronic Society, pp. 198\u2013210 (2019)","DOI":"10.1145\/3338498.3358646"},{"key":"17_CR24","unstructured":"Team, H.F.: Hugging face (nd). https:\/\/huggingface.co\/. Accessed 12 Feb 2025"},{"key":"17_CR25","unstructured":"Tram\u00e8r, F., Zhang, F., Juels, A., Reiter, M.K., Ristenpart, T.: Stealing machine learning models via prediction APIs. In: Holz, T., Savage, S. (eds.) USENIX Security 2016, pp. 601\u2013618. USENIX Association (2016)"},{"key":"17_CR26","unstructured":"Xiao, T., Zhu, J.: Foundations of large language models (2025). https:\/\/api.semanticscholar.org\/CorpusID:275570622"},{"key":"17_CR27","unstructured":"Ioffe, S., Szegedy, C.: Batch normalization: accelerating deep network training by reducing internal covariate shift. In: Bach, F. and Blei, D. (eds.) Proceedings of the 32nd International Conference on Machine Learning, pp. 448\u2013456 (2015). https:\/\/proceedings.mlr.press\/v37\/ioffe15.html"},{"key":"17_CR28","unstructured":"Ba, J., Kiros, J.R., Hinton, G.E.: Layer normalization. In: Advances in Neural Information Processing Systems 2016 Deep Learning Symposium (2016). https:\/\/api.semanticscholar.org\/CorpusID:8236317"},{"key":"17_CR29","doi-asserted-by":"crossref","unstructured":"Canales-Mart\u00ednez, I.A., Santos, D.: Extracting Some Layers of Deep Neural Networks in the Hard-Label Setting. Cryptology ePrint Archive (2025)","DOI":"10.1007\/978-3-032-06754-8_15"}],"container-title":["Lecture Notes in Computer Science","Advances in Cryptology \u2013 EUROCRYPT 2026"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-25333-0_17","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T22:42:47Z","timestamp":1778020967000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-25333-0_17"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032253323","9783032253330"],"references-count":29,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-25333-0_17","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"6 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"EUROCRYPT","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Annual International Conference on the Theory and Applications of Cryptographic Techniques","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Rome","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Italy","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"10 May 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 May 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"45","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"eurocrypt2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/eurocrypt.iacr.org\/2026\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}