Weaponizing the Exit: Input Privacy Leakage Via Exit Routing Manipulation in Multi-Exit Networks

Multi-exit networks improve inference efficiency by allowing inputs to terminate early at intermediate exits. We identify a privacy vulnerability in cloud deployments of these networks: a malicious Cloud Service Provider CSP can infer sensitive properties of individual user inputs solely from...