<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:RubFlama;
panose-1:2 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.E-MailFormatvorlage19
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt;font-family:RubFlama;color:#003560">We cordially invite you to the next</span><span lang="EN-US" style="font-size:12.0pt;font-family:RubFlama;color:#8DAE10"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt;font-family:RubFlama;color:#8DAE10"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:16.0pt;font-family:RubFlama;color:#8DAE10">CASA Distinguished Lecture, November 21, 2023<o:p></o:p></span></b></p>
<p class="MsoNormal"><i><span lang="EN-US" style="font-size:14.0pt;font-family:RubFlama;color:#8DAE10">with
<b>Sandip Kundu</b> (University of Massachusetts Amherst)<o:p></o:p></span></i></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:12.0pt;font-family:RubFlama;color:#003560"><o:p> </o:p></span></b></p>
<p class="MsoNormal" style="text-align:justify;line-height:115%;text-autospace:none">
<b><span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560">The topic is "Model Extraction Attack On Deep Neural Networks Running On GPUs"<o:p></o:p></span></b></p>
<p class="MsoNormal" style="text-align:justify;line-height:115%;text-autospace:none">
<span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-align:justify;line-height:115%;text-autospace:none">
<b><span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560">When:</span></b><span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560"> 21.11.2023, 2 PM<o:p></o:p></span></p>
<p class="MsoNormal" style="text-align:justify;line-height:115%;text-autospace:none">
<b><span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560">Where:</span></b><span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560"> Building TZR ("MB"), Level 1, Room S-MO-104,
Universitätsstraße 142, 44799 Bochum<o:p></o:p></span></p>
<p class="MsoNormal" style="text-align:justify;line-height:115%;text-autospace:none">
<b><span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560">Online-Participation:</span></b><span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560">
<a href="https://ruhr-uni-bochum.zoom.us/j/64776109776?pwd=TVZPSDM1VG9uVWM0dkJIWmpKQnlJQT09#success">
Zoom-Webinar</a><o:p></o:p></span></p>
<p class="MsoNormal" style="text-align:justify;line-height:115%;text-autospace:none">
<span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-align:justify;line-height:115%;text-autospace:none">
<b><span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560">Abstract.</span></b><span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560"> Deep Neural Networks (DNNs) are widely used
for prediction and classification tasks. However, they are vulnerable to a variety of threats, including model extraction, evasion and inversion attacks. Model extraction attacks steal DNN models, which is a threat to intellectual property, data privacy, and
security. We propose a novel DNN architecture extraction attack called EZClone, which uses aggregate GPU profiles as a side-channel information to reconstruct DNN model from an execution. We find that EZClone can correctly predict the architecture of all PyTorch
vision architectures with 100% accuracy. This is the highest accuracy achieved by any attack with the same adversarial constraints using side-channel information. Prior work has shown that once a DNN has been successfully cloned, further attacks such as model
evasion or model inversion can be accelerated significantly. This talk will also discuss side-channel leakage mitigation techniques.<o:p></o:p></span></p>
<p class="MsoNormal" style="text-align:justify;line-height:115%;text-autospace:none">
<span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-align:justify;line-height:115%;text-autospace:none">
<b><span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560">Bio.</span></b><span lang="EN-US" style="font-size:12.0pt;line-height:115%;font-family:RubFlama;color:#003560"> Sandip Kundu is a Professor of Electrical and
Computer Engineering at the University of Massachusetts Amherst. Until recently, he was also a program director at the National Science Foundation within the CISE directorate. Kundu began his career at IBM Research as a Research Staff Member; then worked at
Intel Corporation as a Principal Engineer before joining UMass Amherst as a professor in 2005. He has published nearly 300 research papers in VLSI design and test, holds several key patents including ultra-drowsy sleep mode in processors, and has given more
than a dozen tutorials at various conferences. He is a Fellow of the IEEE, Fellow of the Japan Society for Promotion of Science (JSPS), Senior International Scientist of the Chinese Academy of Sciences and was a Distinguished Visitor of the IEEE Computer Society.
He has been an Associate Editor of the IEEE Transactions on Dependable and Secure Computing. Associate Editor of the IEEE Transactions on Computers, IEEE Transactions on VLSI Systems and ACM Transactions on Design Automation of Electronic Systems. He has been
Technical Program Chair/General Chair of multiple conferences including ICCD, ATS, ISVLSI, DFTS and VLSI Design Conference.<o:p></o:p></span></p>
<div style="mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;padding:0cm 0cm 1.0pt 0cm">
<p class="MsoNormal" style="border:none;padding:0cm"><span lang="EN-US" style="font-size:12.0pt;font-family:RubFlama"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt;font-family:RubFlama"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:RubFlama;color:#003560">Kind regards<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:RubFlama;color:#003560"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:RubFlama;color:#003560">Christina Scholten<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:RubFlama;color:#003560"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:RubFlama;color:#003560;mso-fareast-language:DE">RUHR-UNIVERSITÄT BOCHUM<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:RubFlama;color:#8DAE10;mso-fareast-language:DE">Horst Görtz Institut for IT Security/ Cluster of Excellence CASA
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:RubFlama;color:#1F497D;mso-fareast-language:DE">Marketing and Public Relations<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:RubFlama;color:#1F497D;mso-fareast-language:DE">MC EG 78, Postfach MC 3<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:RubFlama;color:#1F497D;mso-fareast-language:DE">Universitätsstr. 150<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:RubFlama;color:#1F497D;mso-fareast-language:DE">44780 Bochum, Germany<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:RubFlama;color:#1F497D;mso-fareast-language:DE">Tel: +49-(0)234-32-29274<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:RubFlama;color:#1F497D;mso-fareast-language:DE">E-Mail</span><span style="font-family:RubFlama;color:#003560;mso-fareast-language:DE">:
</span><u><span style="font-family:RubFlama;color:#8DAE10;mso-fareast-language:DE"><a href="mailto:christina.scholten@rub.de"><span style="font-family:"Calibri",sans-serif;color:#8DAE10;mso-fareast-language:EN-US">christina.scholten@rub.de</span></a><o:p></o:p></span></u></p>
<p class="MsoNormal"><u><span style="font-family:RubFlama;color:#8DAE10;mso-fareast-language:DE"><o:p><span style="text-decoration:none"> </span></o:p></span></u></p>
<p class="MsoNormal"><u><span style="font-family:RubFlama;color:#8DAE10;mso-fareast-language:DE"><a href="http://www.hgi.rub.de/"><span style="font-family:"Calibri",sans-serif;color:#8DAE10;mso-fareast-language:EN-US">www.hgi.rub.de</span></a>
<o:p></o:p></span></u></p>
<p class="MsoNormal"><u><span style="font-family:RubFlama;color:#8DAE10;mso-fareast-language:DE"><a href="http://www.casa.rub.de/"><span style="font-family:"Calibri",sans-serif;color:#8DAE10;mso-fareast-language:EN-US">www.casa.rub.de</span></a><o:p></o:p></span></u></p>
<p class="MsoNormal"><span style="font-family:RubFlama"><o:p> </o:p></span></p>
<p class="MsoNormal"><i><span lang="EN-US" style="font-family:RubFlama;color:#1F497D;mso-fareast-language:DE">To unsubscribe from any further information from the Horst Görtz Institute for IT Security, follow
</span></i><i><span lang="EN-US" style="font-family:RubFlama;color:#8DAE10;mso-fareast-language:DE"><a href="https://lists.ruhr-uni-bochum.de/mailman/listinfo/hgi-news-international"><span style="color:#8DAE10">this link</span></a></span></i><i><span lang="EN-US" style="font-family:RubFlama;color:#1F497D;mso-fareast-language:DE">.<o:p></o:p></span></i></p>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
</div>
</body>
</html>