End-to-End Hard-Label Cryptanalytic Model Extraction Using Efficient Sign Recovery
This paper proposes a new sign-recovery algorithm that achieves higher sign-recovery accuracy than the existing method, and enables efficient sign recovery even for trained models, and demonstrates end-to-end model extraction from models trained on MNIST and Fashion-MNIST.
Akira Ito, Takayuki Miura, Yosuke Todo
· 0 citations