A new study reveals that large language model weights can be extracted from cloud inference endpoints using timing side channels. The attack exploits subtle latency variations in the model's response generation to reconstruct the underlying parameter data. This method bypasses traditional API access controls by leveraging the physical execution characteristics of the hardware.
- Timing side channels can leak proprietary model weights even with secure APIs.
- Physical execution latency correlates with specific model parameter access patterns.
- Current API rate limiting and access controls do not mitigate this extraction vector.
- Model providers should evaluate hardware-level noise and jitter as defense mechanisms.
- High-value models may need obfuscation or noise injection to prevent reconstruction.