Model Extraction from Neural Networks

A blog post summarizes research by Adi Shamir and colleagues showing a polynomial-time, black-box method—drawing on differential cryptanalysis—to extract all weights from ReLU-based neural networks, validated on a CIFAR-10 model with ~1.2M parameters. The work highlights potential risks to model confidentiality and IP but remains primarily a theoretical advancement rather than a specific cyber incident.