Qr code
中文
姚羽

Professor
Supervisor of Doctorate Candidates
Supervisor of Master's Candidates


Gender:Male
Alma Mater:东北大学
Education Level:With Certificate of Graduation for Doctorate Study
School/Department:计算机科学与工程学院
College: 计算机科学与工程学院
Administrative Position:复杂网络系统安全保障技术教育部工程研究中心主任
Discipline:Computer Applications Technology
Computer Software and Theory
Computer Architecture
Contact Information:

Academic Honor

2013   Excellent talents of the Ministry of education in the new century

Click:Times

Open Time: ..

The Last Update Time: ..

Current position: Home >> Scientific Research >> Paper Publications
DED: A Dynamic-Enhancing Defense Framework Against Model Extraction Attacks in Industrial Internet of Things

Hits:

Journal:IEEE Transactions on Industrial Informatics

Impact Factor:9.8

Summary:In the industrial Internet of Things (IIoT) environment, intelligent models are typically trained on proprietary industrial data, which endows them with substantial intellectual property and commercial value. To safeguard these assets, model owners usually restrict access to closed box interfaces. However, model extraction attacks allow adversaries to steal models without internal access, posing serious threats to IIoT security. Existing defense methods are mainly designed for general domains and fail to consider the unique characteristics of industrial applications. When directly applied to IIoT, they often result in degraded performance or limited applicability. Specifically, previous perturbation-based strategies can partially mitigate attacks but inevitably harm model performance, which is unacceptable in reliability-critical IIoT scenarios; meanwhile, retraining-based defenses are impractical since IIoT models are usually impossible to retrain. To address these challenges, this letter proposes a bypass-style defense method against model extraction attacks tailored for IIoT applications. The proposed approach leverages a deep hash model and a hash-conditional diffusion model to extract subtle features from industrial samples for efficient filtering, and achieves dynamic defense by constructing a malicious sample repository. Experimental results on three representative IIoT datasets demonstrate that our method outperforms existing approaches in terms of defense effectiveness while preserving model performance.

Key Words:In the industrial Internet of Things (IIoT) environment, intelligent models are typically trained on proprietary industrial data, which endows them with substantial intellectual property and commercial value. To safeguard these assets, model owners usually restrict access to closed box interfaces. However, model extraction attacks allow adversaries to steal models without internal access, posing serious threats to IIoT security. Existing defense methods are mainly designed for general domains and fail to consider the unique characteristics of industrial applications. When directly applied to IIoT, they often result in degraded performance or limited applicability. Specifically, previous perturbation-based strategies can partially mitigate attacks but inevitably harm model performance, which is unacceptable in reliability-critical IIoT scenarios; meanwhile, retraining-based defenses are impractical since IIoT models are usually impossible to retrain. To address these challenges, this letter proposes a bypass-style defense method against model extraction attacks tailored for IIoT applications. The proposed approach leverages a deep hash model and a hash-conditional diffusion model to extract subtle features from industrial samples for efficient filtering, and achieves dynamic defense by constructing a malicious sample repository. Experimental results on three representative IIoT datasets demonstrate that our method outperforms existing approaches in terms of defense effectiveness while preserving model performance.

Indexed by:SCI JCR Q1

Note:https://ieeexplore.ieee.org/abstract/document/11737564

Discipline:Engineering

Document Type:JCR 一区

First-Level Discipline:Computer Science and Technology

Translation or Not:No