TIM: Enabling Large-Scale White-Box Testing on In-App Deep Learning Models

被引:0
|
作者
Wu, Hao [1 ]
Gong, Yuhang [1 ]
Ke, Xiaopeng [1 ]
Liang, Hanzhong [1 ]
Xu, Fengyuan [1 ]
Liu, Yunxin [2 ]
Zhong, Sheng [1 ]
机构
[1] Nanjing Univ, Natl Key Lab Novel Soft ware Technol, Nanjing 210023, Peoples R China
[2] Tsinghua Univ, Inst AI Ind Res, Beijing 100083, Peoples R China
关键词
AI model testing; program slicing; program analysis; intelligent application security;
D O I
10.1109/TIFS.2024.3455761
中图分类号
TP301 [理论、方法];
学科分类号
081202 ;
摘要
Intelligent Applications (iApps), equipped with in-App deep learning (DL) models, are emerging to provide reliable DL inference services. However, in-App DL models are typically compiled into inference-only versions to enhance system performance, thereby impeding the evaluation of DL models. Specifically, the assessment of in-App models currently relies on black-box testing methods rather than direct white-box testing approaches. In this work, we propose TIM, an automated tool designed for conducting large-scale white-box testing of in-App models. Taking an iApp as input, TIM can lift the black-box (i.e., inference-only) in-App DL model into a backpropagation-enabled one and package it together, allowing comprehensive DL model testing or security issues detection. TIM proposes two reconstruction techniques to convert the inference-only model to a backpropagation-enabled version and reconstruct the DL-related IO processing code. In our experiments, we utilize TIM to extract 100 unique commercial in-App models and convert the models to white-box models, enabling backpropagation functionality. Experimental results show that TIM's reconstruction techniques exhibit high accuracy. We open-source our prototype and part of the experimental data on the website https://zenodo.org/record/7548141.
引用
收藏
页码:8188 / 8203
页数:16
相关论文
共 50 条
  • [1] Simplified Way of Learning White-Box Testing with JUnit
    Sung, Keum-Young
    ADVANCED MULTIMEDIA AND UBIQUITOUS ENGINEERING: FUTURETECH & MUE, 2016, 393 : 783 - 789
  • [2] White-box content camouflage attacks against deep learning
    Chen, Tianrong
    Ling, Jie
    Sun, Yuping
    Computers and Security, 2022, 117
  • [3] Large-Scale Mobile App Identification Using Deep Learning
    Rezaei, Shahbaz
    Kroencke, Bryce
    Liu, Xin
    IEEE ACCESS, 2020, 8 : 348 - 362
  • [4] White-box content camouflage attacks against deep learning
    Chen, Tianrong
    Ling, Jie
    Sun, Yuping
    COMPUTERS & SECURITY, 2022, 117
  • [5] A White-Box Testing for Deep Neural Networks Based on Neuron Coverage
    Yu, Jing
    Duan, Shukai
    Ye, Xiaojun
    IEEE TRANSACTIONS ON NEURAL NETWORKS AND LEARNING SYSTEMS, 2023, 34 (11) : 9185 - 9197
  • [6] On Efficient Training of Large-Scale Deep Learning Models
    Shen, Li
    Sun, Yan
    Yu, Zhiyuan
    Ding, Liang
    Tian, Xinmei
    Tao, Dacheng
    ACM Computing Surveys, 57 (03):
  • [7] Test4Deep: an Effective White-box Testing for Deep Neural Networks
    Yu, Jing
    Fu, Yao
    Zheng, Yanan
    Zheng, Wang
    Ye, Xiaojun
    2019 22ND IEEE INTERNATIONAL CONFERENCE ON COMPUTATIONAL SCIENCE AND ENGINEERING (IEEE CSE 2019) AND 17TH IEEE INTERNATIONAL CONFERENCE ON EMBEDDED AND UBIQUITOUS COMPUTING (IEEE EUC 2019), 2019, : 16 - 23
  • [8] WhiteFox: White-Box Compiler Fuzzing Empowered by Large Language Models
    Yang, Chenyuan
    Deng, Yinlin
    Lu, Runyu
    Yao, Jiayi
    Liu, Jiawei
    Jabbarvand, Reyhaneh
    Zhang, Lingming
    Proceedings of the ACM on Programming Languages, 2024, 8 (OOPSLA2)
  • [9] White-Box Performance-Influence Models: A Profiling and Learning Approach
    Weber, Max
    Apel, Sven
    Siegmund, Norbert
    2021 IEEE/ACM 43RD INTERNATIONAL CONFERENCE ON SOFTWARE ENGINEERING (ICSE 2021), 2021, : 1059 - 1071
  • [10] White-box performance-influence models: A profiling and learning approach
    Weber, Max
    Apel, Sven
    Siegmund, Norbert
    Proceedings - International Conference on Software Engineering, 2021, : 1059 - 1071