Shangwei Guo

Stealing Deep Reinforcement Learning Models for Fun and Profit

2020 · arXiv (Cornell University)

This paper presents the first model extraction attack against Deep Reinforcement Learning (DRL), which enables an external adversary to precisely recover a black-box DRL model only from its interaction with the environment. Model extraction attacks …

DeepSweep: An Evaluation Framework for Mitigating DNN Backdoor Attacks using Data Augmentation

2021

Public resources and services (e.g., datasets, training platforms, pre-trained models) have been widely adopted to ease the development of Deep Learning-based applications. However, if the third-party providers are untrusted, they can inject poisoned samples into …

Fine-tuning Is Not Enough: A Simple yet Effective Watermark Removal Attack for DNN Models

2021

Watermarking has become the tendency in protecting the intellectual property of DNN models. Recent works, from the adversary's perspective, attempted to subvert watermarking mechanisms by designing watermark removal attacks. However, these attacks mainly adopted sophisticated …