Stealing Neural Networks via Timing Side Channels
Opportunities and Limits of Remote Timing Attacks