@misc{indiciae81e7d8a55f73, title = {Matryoshka: Stealing Functionality of Private ML Data by Hiding Models in Model}, author = {Xudong Pan and Yifan Yan and Shengyao Zhang and Mi Zhang and Min Yang}, year = {2022}, url = {https://arxiv.org/abs/2206.14371}, note = {Source identifier: 2206.14371} }