{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T19:01:05Z","timestamp":1771268465355,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":21,"publisher":"ACM","license":[{"start":{"date-parts":[[2027,2,21]],"date-time":"2027-02-21T00:00:00Z","timestamp":1803168000000},"content-version":"vor","delay-in-days":365,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Science Foundation","award":["#2202310"],"award-info":[{"award-number":["#2202310"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,2,22]]},"DOI":"10.1145\/3773966.3779361","type":"proceedings-article","created":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T17:50:01Z","timestamp":1771264201000},"page":"1200-1204","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Stealing Black-box Hyperdimensional Computing Models Without Data"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1879-4406","authenticated-orcid":false,"given":"Dongning","family":"Ma","sequence":"first","affiliation":[{"name":"Villanova University, Villanova, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2575-0142","authenticated-orcid":false,"given":"Ruixuan","family":"Wang","sequence":"additional","affiliation":[{"name":"Villanova University, Villanova, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4476-2501","authenticated-orcid":false,"given":"Xun","family":"Jiao","sequence":"additional","affiliation":[{"name":"Villanova University, Villanova, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2026,2,21]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"EMBC","author":"Asgarinejad F.","year":"2020","unstructured":"Asgarinejad, F., Thomas, A., and Rosing, T. Detection of epileptic seizures from surface eeg using hyperdimensional computing. In EMBC (2020), IEEE."},{"key":"e_1_3_2_1_2_1","volume-title":"International Conference on Artificial Intelligence and Big Data (ICAIBD)","author":"Asif S.","year":"2021","unstructured":"Asif, S., Wenhui, Y., Tao, Y., Jinhai, S., and Amjad, K. Real time face mask detection system using transfer learning with machine learning method in the era of covid-19 pandemic. In International Conference on Artificial Intelligence and Big Data (ICAIBD) (2021), IEEE."},{"key":"e_1_3_2_1_3_1","volume-title":"A perlin noise-based augmentation strategy for deep learning with small data samples of hrct images. Scientific reports 8, 1","author":"Bae H.-J.","year":"2018","unstructured":"Bae, H.-J., Kim, C.-W., Kim, N., Park, B., Kim, N., Seo, J. B., and Lee, S. M. A perlin noise-based augmentation strategy for deep learning with small data samples of hrct images. Scientific reports 8, 1 (2018), 1-7."},{"key":"e_1_3_2_1_4_1","volume-title":"BioCAS","author":"Burrello A.","year":"2018","unstructured":"Burrello, A., Schindler, K., Benini, L., and Rahimi, A. One-shot learning for ieeg seizure detection using end-to-end binary operations: Local binary patterns with hyperdimensional computing. In BioCAS (2018), IEEE."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"crossref","first-page":"679","DOI":"10.1145\/3489517.3530515","volume-title":"Proceedings of the 59th ACM\/IEEE Design Automation Conference","author":"Duan S.","year":"2022","unstructured":"Duan, S., Ren, S., and Xu, X. Hdlock: Exploiting privileged encoding to protect hyperdimensional computing models against ip stealing. In Proceedings of the 59th ACM\/IEEE Design Automation Conference (2022), pp. 679-684."},{"key":"e_1_3_2_1_6_1","first-page":"2","article-title":"Classification using hyperdimensional computing: A review","volume":"20","author":"Ge L.","year":"2020","unstructured":"Ge, L., and Parhi, K. K. Classification using hyperdimensional computing: A review. IEEE Circuits and Systems Magazine 20, 2 (2020), 30-47.","journal-title":"IEEE Circuits and Systems Magazine"},{"key":"e_1_3_2_1_7_1","volume-title":"ICRC","author":"Imani M.","year":"2017","unstructured":"Imani, M., Kong, D., Rahimi, A., and Rosing, T. Voicehd: Hyperdimensional computing for efficient speech recognition. In ICRC (2017), IEEE."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00044"},{"key":"e_1_3_2_1_9_1","volume-title":"Hyperdimensional computing: An introduction to computing in distributed representation with high-dimensional random vectors. Cognitive computation 1, 2","author":"Kanerva P.","year":"2009","unstructured":"Kanerva, P. Hyperdimensional computing: An introduction to computing in distributed representation with high-dimensional random vectors. Cognitive computation 1, 2 (2009), 139-159."},{"key":"e_1_3_2_1_10_1","volume-title":"CVPR","author":"Kariyappa S.","year":"2021","unstructured":"Kariyappa, S., Prakash, A., and Qureshi, M. K. Maze: Data-free model stealing attack using zeroth-order gradient estimation. In CVPR (2021)."},{"key":"e_1_3_2_1_11_1","unstructured":"Kensler A. Knoll A. Shirley P. Kensler A. Knoll A. and Shirley P. Better gradient noise. Tech. rep. Tech. Rep. UUSCI-2008-001 SCI Institute University of Utah 2008."},{"key":"e_1_3_2_1_12_1","volume-title":"A survey on hyperdimensional computing aka vector symbolic architectures, part i: Models and data transformations. ACM Computing Surveys (CSUR)","author":"Kleyko D.","year":"2021","unstructured":"Kleyko, D., Rachkovskij, D. A., Osipov, E., and Rahimi, A. A survey on hyperdimensional computing aka vector symbolic architectures, part i: Models and data transformations. ACM Computing Surveys (CSUR) (2021)."},{"key":"e_1_3_2_1_13_1","first-page":"11","article-title":"Mstar: a submicrometer absolute metrology system","volume":"28","author":"Lay O.","year":"2003","unstructured":"Lay, O., Dubovitsky, S., Peters, R., Burger, J., Ahn, S.-W., Steier, W., Fetterman, H., and Chang, Y. Mstar: a submicrometer absolute metrology system. Optics Letters 28, 11 (2003), 890-892.","journal-title":"Optics Letters"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"crossref","first-page":"4","DOI":"10.1007\/s13218-019-00623-z","article-title":"An introduction to hyperdimensional computing for robotics","volume":"33","author":"Neubert P.","year":"2019","unstructured":"Neubert, P., Schubert, S., and Protzel, P. An introduction to hyperdimensional computing for robotics. KI-K\u00fcnstliche Intelligenz 33, 4 (2019), 319-330.","journal-title":"KI-K\u00fcnstliche Intelligenz"},{"key":"e_1_3_2_1_15_1","volume-title":"CVPR","author":"Orekondy T.","year":"2019","unstructured":"Orekondy, T., Schiele, B., and Fritz, M. Knockoff nets: Stealing functionality of black-box models. In CVPR (2019)."},{"key":"e_1_3_2_1_16_1","volume-title":"ACM on Asia conference on computer and communications security","author":"Papernot N.","year":"2017","unstructured":"Papernot, N., McDaniel, P., Goodfellow, I., Jha, S., Celik, Z. B., and Swami, A. Practical black-box attacks against machine learning. In ACM on Asia conference on computer and communications security (2017)."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/WACV45572.2020.9093363"},{"key":"e_1_3_2_1_18_1","volume-title":"Model weight theft with just noise inputs: The curious case of the petulant attacker. arXiv preprint arXiv:1912.08987","author":"Roberts N.","year":"2019","unstructured":"Roberts, N., Prabhu, V. U., and McAteer, M. Model weight theft with just noise inputs: The curious case of the petulant attacker. arXiv preprint arXiv:1912.08987 (2019)."},{"key":"e_1_3_2_1_19_1","volume-title":"USENIX Security","author":"Tram\u00e8r F.","year":"2016","unstructured":"Tram\u00e8r, F., Zhang, F., Juels, A., Reiter, M. K., and Ristenpart, T. Stealing machine learning models via prediction . In USENIX Security (2016)."},{"key":"e_1_3_2_1_20_1","volume-title":"DSN","author":"Wei J.","year":"2020","unstructured":"Wei, J., Zhang, Y., Zhou, Z., Li, Z., and Al Faruque, M. A. Leaky dnn: Stealing deep-learning model secret with gpu context-switching side-channel. In DSN (2020), IEEE."},{"key":"e_1_3_2_1_21_1","volume-title":"Medmnist v2: A large-scale lightweight benchmark for 2d and 3d biomedical image classification. arXiv preprint arXiv:2110.14795","author":"Yang J.","year":"2021","unstructured":"Yang, J., Shi, R., Wei, D., Liu, Z., Zhao, L., Ke, B., Pfister, H., and Ni, B. Medmnist v2: A large-scale lightweight benchmark for 2d and 3d biomedical image classification. arXiv preprint arXiv:2110.14795 (2021)."}],"event":{"name":"WSDM '26:The Nineteenth ACM International Conference on Web Search and Data Mining","location":"Boise ID USA","sponsor":["SIGKDD ACM Special Interest Group on Knowledge Discovery in Data","SIGWEB ACM Special Interest Group on Hypertext, Hypermedia, and Web","SIGIR ACM Special Interest Group on Information Retrieval","SIGMOD ACM Special Interest Group on Management of Data"]},"container-title":["Proceedings of the Nineteenth ACM International Conference on Web Search and Data Mining"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/abs\/10.1145\/3773966.3779361","content-type":"text\/html","content-version":"vor","intended-application":"syndication"}],"deposited":{"date-parts":[[2026,2,16]],"date-time":"2026-02-16T18:01:50Z","timestamp":1771264910000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3773966.3779361"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,2,21]]},"references-count":21,"alternative-id":["10.1145\/3773966.3779361","10.1145\/3773966"],"URL":"https:\/\/doi.org\/10.1145\/3773966.3779361","relation":{},"subject":[],"published":{"date-parts":[[2026,2,21]]},"assertion":[{"value":"2026-02-21","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}