Abstract:Deploying DL models on mobile Apps has become ever-more popular. However, existing studies show attackers can easily reverse-engineer mobile DL models in Apps to steal intellectual property or generate effective attacks. A recent approach, Model Obfuscation, has been proposed to defend against such reverse engineering by obfuscating DL model representations, such as weights and computational graphs, without affecting model performance. These existing model obfuscation methods use static methods to obfuscate the model representation, or they use half-dynamic methods but require users to restore the model information through additional input arguments. However, these static methods or half-dynamic methods cannot provide enough protection for on-device DL models. Attackers can use dynamic analysis to mine the sensitive information in the inference codes as the correct model information and intermediate results must be recovered at runtime for static and half-dynamic obfuscation methods. We assess the vulnerability of the existing obfuscation strategies using an instrumentation method and tool, DLModelExplorer, that dynamically extracts correct sensitive model information at runtime. Experiments show it achieves very high attack performance. To defend against such attacks based on dynamic instrumentation, we propose DynaMO, a Dynamic Model Obfuscation strategy similar to Homomorphic Encryption. The obfuscation and recovery process can be done through simple linear transformation for the weights of randomly coupled eligible operators, which is a fully dynamic obfuscation strategy. Experiments show that our proposed strategy can dramatically improve model security compared with the existing obfuscation strategies, with only negligible overheads for on-device models.

Reconstruction of Data Type in Obfuscated Binary Programs

Polymorphic type inference for machine code

Improving type information inferred by decompilers with supervised machine learning

Revisiting Deep Learning for Variable Type Recovery

STRIDE: Simple Type Recognition In Decompiled Executables

Deobfuscate Non-Returning Calls and Call-Stack Tampering in Instruction Traces

Reverse Technique Of Malicious Obfuscated Binary Code Based On Control Flow Graph

Misleading Malware Similarities Analysis By Automatic Data Structure Obfuscation

HexT5: Unified Pre-Training for Stripped Binary Code Information Inference.

CATI: Context-Assisted Type Inference from Stripped Binaries

Targeting Infeasibility Questions on Obfuscated Codes

BinSub: The Simple Essence of Polymorphic Type Inference for Machine Code

Automated Deobfuscation of Android Native Binary Code

A Metamorphic Tool for Data Structure Obfuscation

Breaking Abstractions And Unstructuring Data Structures

OSPREY: Recovery of Variable and Data Structure via Probabilistic Analysis for Stripped Binary

DIComP: Lightweight Data-Driven Inference of Binary Compiler Provenance with High Accuracy

Deobfuscating Android Native Binary Code

Specifying Imperative Data Obfuscations

A Taxonomy of Obfuscating Transformations

DynaMO: Protecting Mobile DL Models through Coupling Obfuscated DL Operators