{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:19:59Z","timestamp":1750220399834,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":10,"publisher":"ACM","license":[{"start":{"date-parts":[[2021,11,26]],"date-time":"2021-11-26T00:00:00Z","timestamp":1637884800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Science and Technology Research and Development program of china state railway group"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2021,11,26]]},"DOI":"10.1145\/3503047.3503085","type":"proceedings-article","created":{"date-parts":[[2022,1,19]],"date-time":"2022-01-19T23:32:51Z","timestamp":1642635171000},"page":"1-5","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Neural Network Model Extraction Based on Adversarial Examples"],"prefix":"10.1145","author":[{"given":"Huiwen","family":"Fang","sequence":"first","affiliation":[{"name":"Beijing University of Posts and Telecommunications, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chunhua","family":"Wu","sequence":"additional","affiliation":[{"name":"Beijing University of Posts and Telecommunications, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2022,1,19]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"CSI Neural Network: Using Side-channels to Recover Your Artificial Neural Network Information[J]","author":"Batina L","year":"2018","unstructured":"Batina L , Bhasin S , Jap D , CSI Neural Network: Using Side-channels to Recover Your Artificial Neural Network Information[J] . 2018 . Batina L , Bhasin S , Jap D , CSI Neural Network: Using Side-channels to Recover Your Artificial Neural Network Information[J]. 2018."},{"key":"e_1_3_2_1_2_1","volume-title":"Stealing Neural Networks via Timing Side Channels[J]","author":"Duddu V","year":"2018","unstructured":"Duddu V , Samanta D , Rao D V , Stealing Neural Networks via Timing Side Channels[J] . 2018 . Duddu V , Samanta D , Rao D V , Stealing Neural Networks via Timing Side Channels[J]. 2018."},{"key":"e_1_3_2_1_3_1","volume-title":"Computer Science","author":"Goodfellow I J","year":"2014","unstructured":"Goodfellow I J , Shlens J , Szegedy C . Explaining and Harnessing Adversarial Examples[J] . Computer Science , 2014 . Goodfellow I J , Shlens J , Szegedy C . Explaining and Harnessing Adversarial Examples[J]. Computer Science, 2014."},{"key":"e_1_3_2_1_4_1","volume-title":"Neural Network Model Extraction Attacks in Edge Devices by Hearing Architectural Hints[J]","author":"Hu X","year":"2019","unstructured":"Hu X , Liang L , Deng L , Neural Network Model Extraction Attacks in Edge Devices by Hearing Architectural Hints[J] . 2019 . Hu X , Liang L , Deng L , Neural Network Model Extraction Attacks in Edge Devices by Hearing Architectural Hints[J]. 2019."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","unstructured":"Hua W Zhang Z Suh G E . Reverse Engineering Convolutional Neural Networks Through Side-channel Information Leaks[C]\/\/ 2018:1-6.  Hua W Zhang Z Suh G E . Reverse Engineering Convolutional Neural Networks Through Side-channel Information Leaks[C]\/\/ 2018:1-6.","DOI":"10.1109\/DAC.2018.8465773"},{"key":"e_1_3_2_1_6_1","volume-title":"Adversarial Logit Pairing[J]","author":"Kannan H","year":"2018","unstructured":"Kannan H , Kurakin A , Goodfellow I . Adversarial Logit Pairing[J] . 2018 . Kannan H , Kurakin A , Goodfellow I . Adversarial Logit Pairing[J]. 2018."},{"key":"e_1_3_2_1_7_1","volume-title":"Towards Deep Learning Models Resistant to Adversarial Attacks[J]","author":"Madry A","year":"2017","unstructured":"Madry A , Makelov A , Schmidt L , Towards Deep Learning Models Resistant to Adversarial Attacks[J] . 2017 . Madry A , Makelov A , Schmidt L , Towards Deep Learning Models Resistant to Adversarial Attacks[J]. 2017."},{"key":"e_1_3_2_1_8_1","volume-title":"Towards Reverse-Engineering Black-Box Neural Networks[J]","author":"Oh S J","year":"2017","unstructured":"Oh S J , Augustin M , Schiele B , Towards Reverse-Engineering Black-Box Neural Networks[J] . 2017 . Oh S J , Augustin M , Schiele B , Towards Reverse-Engineering Black-Box Neural Networks[J]. 2017."},{"key":"e_1_3_2_1_9_1","volume-title":"Shinde S","author":"Tople S","year":"2018","unstructured":"Tople S , Grover K , Shinde S , Privado : Practical and Secure DNN Inference [J]. 2018 . Tople S , Grover K , Shinde S , Privado: Practical and Secure DNN Inference[J]. 2018."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00038"}],"event":{"name":"AISS 2021: 2021 3rd International Conference on Advanced Information Science and System","acronym":"AISS 2021","location":"Sanya China"},"container-title":["Proceedings of the 3rd International Conference on Advanced Information Science and System"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3503047.3503085","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3503047.3503085","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:18:49Z","timestamp":1750191529000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3503047.3503085"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,11,26]]},"references-count":10,"alternative-id":["10.1145\/3503047.3503085","10.1145\/3503047"],"URL":"https:\/\/doi.org\/10.1145\/3503047.3503085","relation":{},"subject":[],"published":{"date-parts":[[2021,11,26]]},"assertion":[{"value":"2022-01-19","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}