@inproceedings {281294, author = {Huiying Li and Shawn Shan and Emily Wenger and Jiayun Zhang and Haitao Zheng and Ben Y. Zhao}, title = {Blacklight: Scalable Defense for Neural Networks against {Query-Based} {Black-Box} Attacks}, booktitle = {31st USENIX Security Symposium (USENIX Security 22)}, year = {2022}, isbn = {978-1-939133-31-1}, address = {Boston, MA}, pages = {2117--2134}, url = {https://www.usenix.org/conference/usenixsecurity22/presentation/li-huiying}, publisher = {USENIX Association}, month = aug } @inproceedings {255262, author = {Shawn Shan and Emily Wenger and Jiayun Zhang and Huiying Li and Haitao Zheng and Ben Y. Zhao}, title = {Fawkes: Protecting Privacy against Unauthorized Deep Learning Models}, booktitle = {29th USENIX Security Symposium (USENIX Security 20)}, year = {2020}, isbn = {978-1-939133-17-5}, pages = {1589--1604}, url = {https://www.usenix.org/conference/usenixsecurity20/presentation/shan}, publisher = {USENIX Association}, month = aug }