CINECA IRIS Institutional Research Information System
IRIS è l'Anagrafe della ricerca dell'Università degli Studi di Trento, e ha lo scopo di raccogliere, documentare, conservare e diffondere, anche ad accesso aperto, la produzione scientifica degli autori afferenti all'Università degli Studi di Trento.
EnglishIn order to defend neural networks against malicious attacks, recent approaches propose the use of secret keys in the training or inference pipelines of learning systems. While this concept is innovative and the results are promising in terms of attack mitigation and classification accuracy, the effectiveness relies on the secrecy of the key. However, this aspect is often not discussed. In this short paper, we explore this issue for the case of a recently proposed key-based deep neural network. White-box experiments on multiple models and datasets, using the original key-based method and our own extensions, show that it is currently possible to extract secret key bits with relatively limited effort.
On the Difficulty of Hiding Keys in Neural Networks / Kupek, Tobias; Pasquini, Cecilia; Böhme, Rainer. - (2020), pp. 73-78. ((Intervento presentato al convegno 8th ACM Workshop on Information Hiding and Multimedia Security, IH and MMSec 2020 tenutosi a Denver, CO nel 22nd–24th June 2020 [10.1145/3369412.3395076].
| Titolo: | On the Difficulty of Hiding Keys in Neural Networks | |
| Autori: | Kupek, Tobias; Pasquini, Cecilia; Böhme, Rainer | |
| Autori Unitn: | ||
| Titolo del volume contenente il saggio: | IH and MMSec 2020: Proceedings of the 2020 ACM Workshop on Information Hiding and Multimedia Security | |
| Luogo di edizione: | New York, NY | |
| Casa editrice: | Association for Computing Machinery, Inc | |
| Anno di pubblicazione: | 2020 | |
| Codice identificativo Scopus: | 2-s2.0-85087877421 | |
| ISBN: | 9781450370509 | |
| Handle: | http://hdl.handle.net/11572/277572 | |
| Citazione: | On the Difficulty of Hiding Keys in Neural Networks / Kupek, Tobias; Pasquini, Cecilia; Böhme, Rainer. - (2020), pp. 73-78. ((Intervento presentato al convegno 8th ACM Workshop on Information Hiding and Multimedia Security, IH and MMSec 2020 tenutosi a Denver, CO nel 22nd–24th June 2020 [10.1145/3369412.3395076]. | |
| Appare nelle tipologie: | 04.1 Saggio in atti di convegno (Paper in proceedings) |
File in questo prodotto:
| File | Descrizione | Tipologia | Licenza | |
|---|---|---|---|---|
| IH2020.pdf | Versione editoriale (Publisher’s layout) | Tutti i diritti riservati (All rights reserved) | Administrator |
Copyright © 2021