{"data":{"id":"8aeb8558-66e3-4830-ad2f-f06a3163d516","title":"SOOM: A Schedule-Search-Based Operator Obfuscation Method Against Model Extraction Attacks","summary":"SOOM is a schedule-search-based operator obfuscation method that defends compiled DNN models against model extraction attacks on standard CPU and GPU backends. Built on TVM, it uses a security-aware learned cost model based on XGBoost gradient boosted trees to balance security and performance. Tests over 105 operator configurations and more than 30,000 tensor computation test cases raised the operator inference failure rate against state-of-the-art extraction attacks to as high as 89%, with performance gains of up to approximately 25.4% in selected cases.","solution":"SOOM: a schedule-search-based operator obfuscation method built on TVM, using a security-aware learned cost model based on XGBoost gradient boosted trees to generate obfuscated executable code for deep learning operators.","labels":["security","research"],"sourceUrl":"http://ieeexplore.ieee.org/document/11557392","publishedAt":"2026-06-10T13:17:33.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["model_theft"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["TVM","XGBoost"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-06-10T13:17:33.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":"peer_reviewed","atlasIds":null}}