Aydin Aysu

Train to Defend: First Defense Against Cryptanalytic Neural Network Parameter Extraction Attacks

Neural networks are valuable intellectual property due to the significant computational cost, expert labor, and proprietary data involved in their development. Consequently, protecting their parameters is critical not only for maintaining a competitive advantage but also for enhancing the model's se…