A First Look at On-device Models in iOS Apps
Authors: Han Hu, Yujin Huang, Qiuyuan Chen, Terry Tue Zhuo, Chunyang Chen
AI-generated Key Points
- Researchers explore factors influencing developers' choices of on-device models for iOS and Android apps
- Study involves analyzing 62 pairs of iOS-Android apps out of a total of 312
- Identify 226 on-device models with specific functionalities in selected iOS apps
- Pipeline includes identifying functionalities and usage scenarios in iOS apps, then locating similar scenarios in Android counterparts using code analysis techniques
- Semantic information like file names, method names, and user interface elements used to infer potential usage scenarios
- Findings validated by running apps to verify inferred scenarios align with model functionalities
- Three alternatives for on-device models: utilizing other on-device models, invoking on-cloud models, or implementing custom obfuscation techniques
- Developers may use cloud-based services by pre-configuring SDK libraries or resorting to customized DL models when no suitable options are available
Abstract: Powered by the rising popularity of deep learning techniques on smartphones, on-device deep learning models are being used in vital fields like finance, social media, and driving assistance. Because of the transparency of the Android platform and the on-device models inside, on-device models on Android smartphones have been proven to be extremely vulnerable. However, due to the challenge in accessing and analysing iOS app files, despite iOS being a mobile platform as popular as Android, there are no relevant works on on-device models in iOS apps. Since the functionalities of the same app on Android and iOS platforms are similar, the same vulnerabilities may exist on both platforms. In this paper, we present the first empirical study about on-device models in iOS apps, including their adoption of deep learning frameworks, structure, functionality, and potential security issues. We study why current developers use different on-device models for one app between iOS and Android. We propose a more general attack against white-box models that does not rely on pre-trained models and a new adversarial attack approach based on our findings to target iOS's gray-box on-device models. Our results show the effectiveness of our approaches. Finally, we successfully exploit the vulnerabilities of on-device models to attack real-world iOS apps.
Tools for this paper
Ask questions about this paper to our AI assistant
You can also chat with multiple papers at once here.
The previous summary was created more than a year ago and can be re-run (if necessary) by clicking on the Run button below.
Similar papers summarized with our AI tools
Navigate through even more similar papers through a
tree representationLook for similar papers (in beta version)
We compare the title and abstract with papers indexed in our database. For arXiv papers, we search within the same category; for DOI and other sources, we search across sources and subjects. You can rerun the search as our database grows.
Disclaimer: The AI-based summarization tool and virtual assistant provided on this website may not always provide accurate and complete summaries or responses. We encourage you to carefully review and evaluate the generated content to ensure its quality and relevance to your needs.