论文标题
学会自动从AI程序逆转DNN
Learning to Reverse DNNs from AI Programs Automatically
论文作者
论文摘要
随着DNN在边缘设备上的私有化部署，DNNS的安全性引起了重大关注。为了自动量化设备DNNS的模型泄漏风险，我们提出了NNREVERSE，这是第一个基于学习的方法，它可以从AI程序中反向DNN，而无需域知识。 NNREVERSE训练代表模型，以表示DNN层的二进制代码的语义。通过在我们的数据库中搜索最相似的函数，nnreverse Inde Inde Inde Inde Inde Inde Inte Indever Inter dive dister dunction的二进制代码的层类型。为了代表汇编指令语义，nnreverse提出了一个更细粒度的嵌入模型，以代表组装函数的文本和结构语义。
With the privatization deployment of DNNs on edge devices, the security of on-device DNNs has raised significant concern. To quantify the model leakage risk of on-device DNNs automatically, we propose NNReverse, the first learning-based method which can reverse DNNs from AI programs without domain knowledge. NNReverse trains a representation model to represent the semantics of binary code for DNN layers. By searching the most similar function in our database, NNReverse infers the layer type of a given function's binary code. To represent assembly instructions semantics precisely, NNReverse proposes a more fine-grained embedding model to represent the textual and structural-semantic of assembly functions.
