{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,3]],"date-time":"2025-10-03T08:28:19Z","timestamp":1759480099683},"reference-count":45,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62002338, 61925208, 61732007, 61732002, 61702478,"],"award-info":[{"award-number":["62002338, 61925208, 61732007, 61732002, 61702478,"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput."],"published-print":{"date-parts":[[2022]]},"DOI":"10.1109\/tc.2022.3148235","type":"journal-article","created":{"date-parts":[[2022,2,4]],"date-time":"2022-02-04T20:37:14Z","timestamp":1644007034000},"page":"1-1","source":"Crossref","is-referenced-by-count":7,"title":["A Systematic View of Model Leakage Risks in Deep Neural Network Systems"],"prefix":"10.1109","author":[{"given":"Xing","family":"Hu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ling","family":"Liang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaobing","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lei","family":"Deng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yu","family":"Ji","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yufei","family":"Ding","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zidong","family":"Du","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qi","family":"Guo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tim","family":"Sherwood","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuan","family":"Xie","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00027"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref33","article-title":"Adversarial examples in the physical world","author":"kurakin","year":"2016"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v30i1.10237"},{"key":"ref31","article-title":"Intriguing properties of neural networks","author":"szegedy","year":"2013"},{"key":"ref30","article-title":"CUDA toolkit documentation.","year":"0"},{"key":"ref37","article-title":"SqueezeNet: AlexNet-level accuracy with 50x fewer parameters and < 0.5 MB model size","author":"iandola","year":"2016"},{"key":"ref36","article-title":"Transferability in machine learning: From phenomena to black-box attacks using adversarial samples","author":"papernot","year":"2016","journal-title":"CoRR"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58558-7_39"},{"key":"ref10","first-page":"1","article-title":"Towards reverse-engineering black-box neural networks","author":"oh","year":"2018","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516660"},{"key":"ref11","first-page":"601","article-title":"Stealing machine learning models via prediction APIs","author":"tram\u00e8r","year":"2016","journal-title":"Proc 25th USENIX Conf Secur Symp"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00038"},{"key":"ref13","first-page":"4:1","article-title":"Reverse engineering convolutional neural networks through side-channel information leaks","author":"hua","year":"2018","journal-title":"Proc 55th Annu Des Autom Conf"},{"key":"ref14","article-title":"Cache telepathy: Leveraging shared resource attacks to learn DNN architectures","author":"yan","year":"2018","journal-title":"CoRR"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243831"},{"key":"ref16","first-page":"1","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2015","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref17","article-title":"Rethinking the inception architecture for computer vision","author":"szegedy","year":"2015","journal-title":"CoRR"},{"key":"ref18","article-title":"Towards the science of security and privacy in machine learning","author":"papernot","year":"2016"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2018.00017"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/1143844.1143891"},{"key":"ref4","first-page":"6000","article-title":"Attention is all you need","author":"vaswani","year":"2017","journal-title":"Proc Int Conf Neural Inf Process"},{"key":"ref27","first-page":"ii-1764","article-title":"Towards end-to-end speech recognition with recurrent neural networks","author":"graves","year":"2014","journal-title":"Proc 31st Int Conf Int Conf Mach Learn"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2017.7953159"},{"key":"ref6","article-title":"Autonomous vehicle adoption study","year":"2016"},{"key":"ref29","first-page":"2261","article-title":"Densely connected convolutional networks","author":"huang","year":"2017","journal-title":"Proc IEEE Conf Comput Vis Pattern Recognit"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref7","article-title":"Nvidia is powering the world's first level 3 self-driving production car","year":"2017"},{"key":"ref2","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"2014","journal-title":"CoRR"},{"key":"ref9","first-page":"1","article-title":"Delving into transferable adversarial examples and black-box attacks","author":"liu","year":"2017","journal-title":"Proc Int Conf Learn Representations"},{"key":"ref1","first-page":"1097","article-title":"ImageNet classification with deep convolutional neural networks","author":"krizhevsky","year":"2012","journal-title":"Proc 25th Int Conf Neural Inf Process Syst"},{"key":"ref20","year":"2019"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48063.2020.00031"},{"key":"ref22","article-title":"Pytorch tutorials.","year":"0"},{"key":"ref21","article-title":"NVIDIA cuDNN GPU accelerated deep learning","year":"2017"},{"key":"ref42","first-page":"1973","article-title":"Hermes attack: Steal DNN models with lossless inference accuracy","author":"zhu","year":"2021","journal-title":"Proc 30th USENIX Secur Symp"},{"key":"ref24","article-title":"PolyNet: A pursuit of structural diversity in very deep networks","author":"zhang","year":"2016","journal-title":"CoRR"},{"key":"ref41","article-title":"TVM: End-to-end optimization stack for deep learning","author":"chen","year":"2018","journal-title":"CoRR"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v31i1.11231"},{"key":"ref44","article-title":"SESAME: Software defined enclaves to secure inference accelerators with multi-tenant execution","author":"banerjee","year":"2020"},{"key":"ref26","article-title":"BENCHIP: Benchmarking intelligence processors","author":"tao","year":"2017"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378460"},{"key":"ref25","article-title":"Learning transferable architectures for scalable image recognition","author":"zoph","year":"2017","journal-title":"CoRR"}],"container-title":["IEEE Transactions on Computers"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/12\/4358213\/09705069.pdf?arnumber=9705069","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,11,17]],"date-time":"2022-11-17T16:23:04Z","timestamp":1668702184000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9705069\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"references-count":45,"URL":"https:\/\/doi.org\/10.1109\/tc.2022.3148235","relation":{},"ISSN":["0018-9340","1557-9956","2326-3814"],"issn-type":[{"value":"0018-9340","type":"print"},{"value":"1557-9956","type":"electronic"},{"value":"2326-3814","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]}}}