Stateful detection of model extraction attacks

S Pal, Y Gupta, A Kanade, S Shevade - arXiv preprint arXiv:2107.05166, 2021 - arxiv.org
Machine-Learning-as-a-Service providers expose machine learning (ML) models through
application programming interfaces (APIs) to developers. Recent work has shown that …

A comprehensive defense framework against model extraction attacks

W Jiang, H Li, G Xu, T Zhang… - IEEE Transactions on …, 2023 - ieeexplore.ieee.org
As a promising service, Machine Learning as a Service (MLaaS) provides personalized
inference functions for clients through paid APIs. Nevertheless, it is vulnerable to model …

Activethief: Model extraction using active learning and unannotated public data

S Pal, Y Gupta, A Shukla, A Kanade, S Shevade… - Proceedings of the AAAI …, 2020 - aaai.org
Abstract Machine learning models are increasingly being deployed in practice. Machine
Learning as a Service (MLaaS) providers expose such models to queries by third-party …

Server-based manipulation attacks against machine learning models

C Liao, H Zhong, S Zhu, A Squicciarini - Proceedings of the Eighth ACM …, 2018 - dl.acm.org
Machine learning approaches have been increasingly applied to various applications for
data analytics (eg spam filtering, image classification). Further, with the growing adoption of …

Beyond Labeling Oracles: What does it mean to steal ML models?

A Shafran, I Shumailov, MA Erdogdu… - arXiv preprint arXiv …, 2023 - arxiv.org
Model extraction attacks are designed to steal trained models with only query access, as is
often provided through APIs that ML-as-a-Service providers offer. ML models are expensive …

I know what you trained last summer: A survey on stealing machine learning models and defences

D Oliynyk, R Mayer, A Rauber - ACM Computing Surveys, 2023 - dl.acm.org
Machine-Learning-as-a-Service (MLaaS) has become a widespread paradigm, making
even the most complex Machine Learning models available for clients via, eg, a pay-per …

Increasing the cost of model extraction with calibrated proof of work

A Dziedzic, MA Kaleem, YS Lu, N Papernot - arXiv preprint arXiv …, 2022 - arxiv.org
In model extraction attacks, adversaries can steal a machine learning model exposed via a
public API by repeatedly querying it and adjusting their own model based on obtained …

Model extraction attacks revisited

J Liang, R Pang, C Li, T Wang - arXiv preprint arXiv:2312.05386, 2023 - arxiv.org
Model extraction (ME) attacks represent one major threat to Machine-Learning-as-a-Service
(MLaaS) platforms by``stealing''the functionality of confidential machine-learning models …

Mlcapsule: Guarded offline deployment of machine learning as a service

L Hanzlik, Y Zhang, K Grosse… - Proceedings of the …, 2021 - openaccess.thecvf.com
Abstract Machine Learning as a Service (MLaaS) is a popular and convenient way to access
a trained machine learning (ML) model trough an API. However, if the user's input is …

Exploring connections between active learning and model extraction

V Chandrasekaran, K Chaudhuri, I Giacomelli… - 29th USENIX Security …, 2020 - usenix.org
Machine learning is being increasingly used by individuals, research institutions, and
corporations. This has resulted in the surge of Machine Learning-as-a-Service (MLaaS) …