Abstract:These days, deep learning models have achieved great success in multiple fields, from autonomous driving to medical diagnosis. These models have expanded the abilities of artificial intelligence by offering great solutions to complex problems that were very difficult to solve earlier. In spite of their unseen success in various, it has been identified, through research conducted, that deep learning models can be subjected to various attacks that compromise model security and data privacy of the Deep Neural Network models. Deep learning models can be subjected to various attacks at different stages of their lifecycle. During the testing phase, attackers can exploit vulnerabilities through different kinds of attacks such as Model Extraction Attacks, Model Inversion attacks, and Adversarial attacks. Model Extraction Attacks are aimed at reverse-engineering a trained deep learning model, with the primary objective of revealing its architecture and parameters. Model inversion attacks aim to compromise the privacy of the data used in the Deep learning model. These attacks are done to compromise the confidentiality of the model by going through the sensitive training data from the model's predictions. By analyzing the model's responses, attackers aim to reconstruct sensitive information. In this way, the model's data privacy is compromised. Adversarial attacks, mainly employed on computer vision models, are made to corrupt models into confidently making incorrect predictions through malicious testing data. These attacks subtly alter the input data, making it look normal but misleading deep learning models to make incorrect decisions. Such attacks can happen during both the model's evaluation and training phases. Data Poisoning Attacks add harmful data to the training set, disrupting the learning process and reducing the reliability of the deep learning mode.

Towards Scalable and Robust Model Versioning

Improving Adversarial Robustness of 3D Point Cloud Classification Models

A GAN-Based Defense Framework Against Model Inversion Attacks.

Extracting Robust Models with Uncertain Examples

Impact of Architectural Modifications on Deep Learning Adversarial Robustness

Model-Reuse Attacks on Deep Learning Systems

Effective ML Model Versioning in Edge Networks

Improving Model Robustness Against Adversarial Examples with Redundant Fully Connected Layer.

Effects of Scale on Language Model Robustness

Advanced Techniques for Improving Model Robustness in Adversarial Machine Learning

Exploring Scaling Trends in LLM Robustness

Semantic Robustness of Models of Source Code

Adversarial Robustness of Open-source Text Classification Models and Fine-Tuning Chains

Security and Privacy Challenges in Deep Learning Models

Model Extraction Attacks Revisited

A Review of Confidentiality Threats Against Embedded Neural Network Models

You Don't Need Robust Machine Learning to Manage Adversarial Attack Risks

Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attacks

CAMH: Advancing Model Hijacking Attack in Machine Learning

A Tale of Evil Twins: Adversarial Inputs Versus Poisoned Models

Model Inversion Robustness: Can Transfer Learning Help?