Newest papers

Weaponizing the Exit: Input Privacy Leakage via Exit Routing Manipulation in Multi-Exit Networks

Yulong Tian, Lei Wang, Jincan Yang, Hao Wu, Hao Han, Fengyuan Xu, Sheng Zhong · 2026 · arXiv (Cornell University)

DOI: 10.48550/arxiv.2610.31246 · cited by 0 works (OpenAlex) · open-access PDF

Indonesian

Multi-output adalah meningkatkan efisiensi inferensi dengan memungkinkan input untuk berakhir lebih awal pada output menengah. Kami mengidentifikasi kerentanan privasi dalam penyebaran cloud dari jaringan ini: Penyedia Layanan Cloud berbahaya (CSP) dapat menyimpulkan sifat-sifat sensitif dari input pengguna individu hanya dari latensi inferensi, tanpa mengakses input yang ditentukan, kondisi menengah, atau output model. Serangan ini mengeksploitasi kontrol CSP atas rantai pasokan model. Sebelum penyebaran, CSP menyediakan jaringan multi-output yang dirancang khusus yang dimanipulasi sehingga input yang membawa properti sensitif target diarahkan ke output yang ditentukan dengan probabilitas tinggi, sementara input lain keluar di tempat lain. Pada saat melayani, CSP memasukkan indeks output dari per-query latency utama, dengan demikian menentukan apakah masing-masing input memiliki akses ke pro

Machine translation (Meta M2M100); the English original follows.

Abstract

Multi-exit networks improve inference efficiency by allowing inputs to terminate early at intermediate exits. We identify a privacy vulnerability in cloud deployments of these networks: a malicious Cloud Service Provider (CSP) can infer sensitive properties of individual user inputs solely from inference latency, without accessing inputs, intermediate states, or model outputs. The attack exploits the CSP's control over the model supply chain. Prior to deployment, the CSP supplies a specially crafted multi-exit network manipulated so that inputs carrying a target sensitive property are routed to a designated exit with high probability, while other inputs exit elsewhere. At serving time, the CSP infers the exit index from per-query latency, thereby determining whether each input possesses the target property without accessing inputs, outputs, or internal model states. We propose a training framework combining selective label smoothing and entropy-covariance optimization to control confidence distributions across exits and reduce premature termination. We conduct experiments on four datasets across ten target properties. The results demonstrate strong attack effectiveness and stealthiness. The attack achieves an average F1 score of 0.73, compared to 0.25 for the strongest baseline, while main task accuracy drops by less than 1.3\% and inference speedup degradation remains below 0.1 in most settings. Our code is available at https://github.com/kazefjj/Weaponizing_the_Exit.

Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese

Topics: Computer science, Exploit, Inference, Cloud computing, Computer network, Smoothing

Sources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange