Post-breach Recovery: Protection against White-box Adversarial Examples for Leaked DNN Models. (arXiv:2205.10686v1 [cs.CR])

Server breaches are an unfortunate reality on today's Internet. In the
context of deep neural network (DNN) models, they are particularly harmful,
because a leaked model gives an attacker "white-box" access to generate
adversarial examples, a threat model that has no practical robust defenses. For
practitioners who have invested years and millions into proprietary DNNs, e.g.
medical imaging, this seems like an inevitable disaster looming on the horizon.

In this paper, we consider the problem of post-breach recovery for DNN …

adversarial box breach protection recovery