Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data
(IJCNN) (Code) Stealing black-box models (CNNs) knowledge by querying them with random natural images (ImageNet and Microsoft-COCO).
- from
- Audit Algorithms
- added
- 2026-10-10
- likes
- 0
similar
-
Knockoff Nets: Stealing Functionality of Black-Box Models arxiv.org
(CVPR) Ask to what extent can an adversary steal functionality of such "victim" models based solely on blackbox interactions: image in, predictions out.
-
Stealing Knowledge from Protected Deep Neural Networks Using Composite Unlabeled Data ieeexplore.ieee.org
(ICNN) Composite method which can be used to attack and extract the knowledge ofa black box model even if it completely conceals its softmaxoutput.
-
Data driven exploratory attacks on black box classifiers in adversarial domains sciencedirect.com
(Neurocomputing) Reverse engineers remote classifier models (e.g., for evading a CAPTCHA test).
-
Stealing Machine Learning Models via Prediction APIs usenix.org
(Usenix Security) (Code) Aims at extracting machine learning models in use by remote services.
-
Stealing Neural Networks via Timing Side Channels arxiv.org
(arXiv) Stealing/approximating a model through timing attacks usin queries.
-
Towards Reverse-Engineering Black-Box Neural Networks arxiv.org
(ICLR) (Code) Infer inner hyperparameters (eg number of layers, non-linear activation type) of a remote neural network model by analysing its response patterns to certain inputs.
Audit Algorithms › Papers > 2018: “(IJCNN) (Code) Stealing black-box models (CNNs) knowledge by querying them with random natural images (ImageNet and Microsoft-COCO).”