When Rotation Bounds Nothing: Streaming Image Classifiers to Field Nodes Under Physical Capture
This research investigates securing image classifiers streamed into field nodes that are physically captured. The system uses a chunkable model that streams into volatile memory and rotates periodically, discarding old versions. The study shows that an adversary seizing the device only recovers the small prefix currently resident in memory, meaning delivery-side secrecy is not enough to prevent recovery if the model is never persisted.