BarkBeetle: Stealing Decision Tree Models with Fault Injection
Qifan Wang, Jonas Sander, Minmin Jiang, Thomas Eisenbarth, David Oswald

TL;DR
BarkBeetle is a novel fault injection attack that efficiently extracts internal structure of decision tree models, demonstrating practical feasibility and raising security concerns for ML models in sensitive applications.
Contribution
This work introduces BarkBeetle, a new fault injection attack that significantly improves the efficiency of extracting decision tree structures compared to prior methods.
Findings
BarkBeetle requires fewer queries than previous attacks.
It successfully recovers detailed decision tree structures.
The attack is feasible on low-cost hardware like Raspberry Pi.
Abstract
Machine learning models, particularly decision trees (DTs), are widely adopted across various domains due to their interpretability and efficiency. However, as ML models become increasingly integrated into privacy-sensitive applications, concerns about their confidentiality have grown, particularly in light of emerging threats such as model extraction and fault injection attacks. Assessing the vulnerability of DTs under such attacks is therefore important. In this work, we present BarkBeetle, a novel attack that leverages fault injection to extract internal structural information of DT models. BarkBeetle employs a bottom-up recovery strategy that uses targeted fault injection at specific nodes to efficiently infer feature splits and threshold values. Our proof-of-concept implementation demonstrates that BarkBeetle requires significantly fewer queries and recovers more structural…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdversarial Robustness in Machine Learning · Explainable Artificial Intelligence (XAI) · Software System Performance and Reliability
