Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: NeurObfuscator: A Full-stack Obfuscation Tool to Mitigate Neural
  Architecture Stealing   Neural network stealing attacks have posed grave threats to neural network
model deployment. Such attacks can be launched by extracting neural
architecture information, such as layer sequence and dimension parameters,
through leaky side-channels. To mitigate such attacks, we propose
NeurObfuscator, a full-stack obfuscation tool to obfuscate the neural network
architecture while preserving its functionality with very limited performance
overhead. At the heart of this tool is a set of obfuscating knobs, including
layer branching, layer widening, selective fusion and schedule pruning, that
increase the number of operators, reduce/increase the latency, and number of
cache and DRAM accesses. A genetic algorithm-based approach is adopted to
orchestrate the combination of obfuscating knobs to achieve the best
obfuscating effect on the layer sequence and dimension parameters so that the
architecture information cannot be successfully extracted. Results on sequence
obfuscation show that the proposed tool obfuscates a ResNet-18 ImageNet model
to a totally different architecture (with 44 layer difference) without
affecting its functionality with only 2% overall latency overhead. For
dimension obfuscation, we demonstrate that an example convolution layer with 64
input and 128 output channels can be obfuscated to generate a layer with 207
input and 93 output channels with only a 2% latency overhead.

30
The categories of this paper are: q-alg
20
The categories of this paper are: acc-phys
3
The categories of this paper are: physics
11
The categories of this paper are: hep-lat
4
The categories of this paper are: cond-mat
24
The categories of this paper are: dg-ga
37
The categories of this paper are: supr-con
18
The categories of this paper are: econ
10
The categories of this paper are: q-bio
17
The categories of this paper are: q-fin
22
The categories of this paper are: chao-dyn
21
The categories of this paper are: adap-org
23
The categories of this paper are: solv-int
31
The categories of this paper are: ao-sci
0
The categories of this paper are: hep-ph
15
The categories of this paper are: nucl-ex