{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,24]],"date-time":"2026-10-24T06:40:10Z","timestamp":1792824010496,"version":"4.5.0"},"reference-count":44,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62002338, 61925208, 61732007, 61732002, 61702478,"],"award-info":[{"award-number":["62002338, 61925208, 61732007, 61732002, 61702478,"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Comput."],"published-print":{"date-parts":[[2022]]},"DOI":"10.1109\/tc.2022.3148235","type":"journal-article","created":{"date-parts":[[2022,2,4]],"date-time":"2022-02-04T15:37:14Z","timestamp":1643989034000},"page":"1-1","source":"Crossref","is-referenced-by-count":8,"title":["A Systematic View of Model Leakage Risks in Deep Neural Network Systems"],"prefix":"10.1109","author":[{"given":"Xing","family":"Hu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ling","family":"Liang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaobing","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lei","family":"Deng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yu","family":"Ji","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yufei","family":"Ding","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zidong","family":"Du","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qi","family":"Guo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tim","family":"Sherwood","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuan","family":"Xie","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","first-page":"1097","article-title":"ImageNet classification with deep convolutional neural networks","volume-title":"Proc. 25th Int. Conf. Neural Inf. Process. Syst.","author":"Krizhevsky"},{"key":"ref2","article-title":"Very deep convolutional networks for large-scale image recognition","volume-title":"CoRR","author":"Simonyan","year":"2014"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2017.7953159"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.48550\/ARXIV.1706.03762"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref6","article-title":"Autonomous vehicle adoption study","year":"2016"},{"key":"ref7","article-title":"Nvidia is powering the world\u2019s first level 3 self-driving production car","year":"2017"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref9","first-page":"1","article-title":"Delving into transferable adversarial examples and black-box attacks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Liu"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-28954-6_7"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.5555\/3241094.3241142"},{"key":"ref12","article-title":"Stealing hyperparameters in machine learning","author":"Wang","year":"2018","journal-title":"CoRR"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3195970.3196105"},{"key":"ref14","article-title":"Cache telepathy: Leveraging shared resource attacks to learn DNN architectures","author":"Yan","year":"2018","journal-title":"CoRR"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243831"},{"key":"ref16","first-page":"1","article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Goodfellow"},{"key":"ref17","article-title":"Rethinking the inception architecture for computer vision","author":"Szegedy","year":"2015","journal-title":"CoRR"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/eurosp.2018.00035"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2018.00017"},{"key":"ref21","article-title":"NVIDIA cuDNN GPU accelerated deep learning","year":"2017"},{"key":"ref22","article-title":"Pytorch tutorials."},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.5555\/3298023.3298188"},{"key":"ref24","article-title":"PolyNet: A pursuit of structural diversity in very deep networks","author":"Zhang","year":"2016","journal-title":"CoRR"},{"key":"ref25","article-title":"Learning transferable architectures for scalable image recognition","author":"Zoph","year":"2017","journal-title":"CoRR"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/s11390-018-1805-8"},{"key":"ref27","first-page":"II-1764","article-title":"Towards end-to-end speech recognition with recurrent neural networks","volume-title":"Proc. 31st Int. Conf. Int. Conf. Mach. Learn.","author":"Graves"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/1143844.1143891"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.243"},{"key":"ref30","article-title":"CUDA toolkit documentation."},{"key":"ref31","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.5555\/3016100.3016102"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-58558-7_39"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref36","article-title":"Transferability in machine learning: From phenomena to black-box attacks using adversarial samples","volume-title":"CoRR","author":"Papernot","year":"2016"},{"key":"ref37","article-title":"SqueezeNet: AlexNet-level accuracy with 50x fewer parameters and < 0.5 MB model size","author":"Iandola","year":"2016"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00027"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516660"},{"key":"ref41","article-title":"TVM: End-to-end optimization stack for deep learning","author":"Chen","year":"2018","journal-title":"CoRR"},{"key":"ref42","first-page":"1973","article-title":"Hermes attack: Steal DNN models with lossless inference accuracy","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Zhu"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3373376.3378460"},{"key":"ref44","article-title":"SESAME: Software defined enclaves to secure inference accelerators with multi-tenant execution","author":"Banerjee","year":"2020"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48063.2020.00031"}],"container-title":["IEEE Transactions on Computers"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/12\/4358213\/09705069.pdf?arnumber=9705069","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,10,24]],"date-time":"2026-10-24T06:32:15Z","timestamp":1792823535000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9705069\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"references-count":44,"URL":"https:\/\/doi.org\/10.1109\/tc.2022.3148235","relation":{},"ISSN":["0018-9340","1557-9956","2326-3814"],"issn-type":[{"value":"0018-9340","type":"print"},{"value":"1557-9956","type":"electronic"},{"value":"2326-3814","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]}}}