{"total":34,"rows":[{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2112.03476","title":"Defending against Model Stealing via Verifying Embedded External Features","created":"2021-12-07","cited_by_count":46,"area":null},{"id":"2104.14235","title":"Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safety","created":"2021-04-29","cited_by_count":35,"area":null},{"id":"2107.08909","title":"MEGEX: Data-Free Model Extraction Attack against Gradient-Based Explainable AI","created":"2021-07-19","cited_by_count":35,"area":null},{"id":"2208.02820","title":"MOVE: Effective and Harmless Ownership Verification via Embedded External Features","created":"2022-08-04","cited_by_count":21,"area":null},{"id":"2506.22521","title":"A Survey on Model Extraction Attacks and Defenses for Large Language Models","created":"2025-06-26","cited_by_count":19,"area":null},{"id":"2309.10058","title":"Dual Student Networks for Data-Free Model Stealing","created":"2023-09-18","cited_by_count":17,"area":null},{"id":"2304.08566","title":"GrOVe: Ownership Verification of Graph Neural Networks using Embeddings","created":"2023-04-17","cited_by_count":16,"area":null},{"id":"2212.05428","title":"ezDPS: An Efficient and Zero-Knowledge Machine Learning Inference Pipeline","created":"2022-12-11","cited_by_count":10,"area":null},{"id":"2104.05921","title":"Thief, Beware of What Get You There: Towards Understanding Model Extraction Attack","created":"2021-04-13","cited_by_count":9,"area":null},{"id":"2107.05166","title":"Stateful Detection of Model Extraction Attacks","created":"2021-07-12","cited_by_count":8,"area":null},{"id":"2506.02362","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","created":"2025-06-03","cited_by_count":8,"area":null},{"id":"2207.10561","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","created":"2022-07-21","cited_by_count":6,"area":null},{"id":"2501.01090","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","created":"2025-01-02","cited_by_count":6,"area":null},{"id":"2502.16065","title":"A Survey of Model Extraction Attacks and Defenses in Distributed Computing Environments","created":"2025-02-22","cited_by_count":6,"area":null},{"id":"2302.11982","title":"A Plot is Worth a Thousand Words: Model Information Stealing Attacks via Scientific Plots","created":"2023-02-23","cited_by_count":5,"area":null},{"id":"2209.04022","title":"Privacy of Autonomous Vehicles: Risks, Protection Methods, and Future Directions","created":"2022-09-08","cited_by_count":4,"area":null},{"id":"2104.12623","title":"Good Artists Copy, Great Artists Steal: Model Extraction Attacks Against Image Translation Models","created":"2021-04-26","cited_by_count":3,"area":null},{"id":"2106.11424","title":"HODA: Hardness-Oriented Detection of Model Extraction Attacks","created":"2021-06-21","cited_by_count":3,"area":null},{"id":"2203.10923","title":"TinyMLOps: Operational Challenges for Widespread Edge AI Adoption","created":"2022-03-21","cited_by_count":3,"area":null},{"id":"2210.13289","title":"Secure and Trustworthy Artificial Intelligence-Extended Reality (AI-XR) for Metaverses","created":"2022-10-24","cited_by_count":3,"area":null},{"id":"2306.11338","title":"FDINet: Protecting against DNN Model Extraction via Feature Distortion Index","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2508.19641","title":"Intellectual Property in Graph-Based Machine Learning as a Service: Attacks and Defenses","created":"2025-08-27","cited_by_count":3,"area":null},{"id":"2406.02027","title":"Inference Attacks: A Taxonomy, Survey, and Promising Directions","created":"2024-06-04","cited_by_count":2,"area":null},{"id":"2103.06797","title":"BODAME: Bilevel Optimization for Defense Against Model Extraction","created":"2021-03-11","cited_by_count":1,"area":null},{"id":"2309.01838","title":"Efficient Defense Against Model Stealing Attacks on Convolutional Neural Networks","created":"2023-09-04","cited_by_count":1,"area":null},{"id":"2309.04664","title":"Compact: Approximating Complex Activation Functions for Secure Computation","created":"2023-09-09","cited_by_count":1,"area":null},{"id":"2312.15036","title":"SODA: Protecting Proprietary Information in On-Device Machine Learning Models","created":"2023-12-22","cited_by_count":1,"area":null},{"id":"2502.15567","title":"Model Privacy: A Unified Framework for Understanding Model Stealing Attacks and Defenses","created":"2025-02-21","cited_by_count":1,"area":null},{"id":"2206.11480","title":"A Framework for Understanding Model Extraction Attack and Defense","created":"2022-06-23","cited_by_count":0,"area":null},{"id":"2505.23791","title":"Evaluating Query Efficiency and Accuracy of Transfer Learning-based Model Extraction Attack in Federated Learning","created":"2025-05-25","cited_by_count":0,"area":null},{"id":"2509.11159","title":"Stabilizing Data-Free Model Extraction","created":"2025-09-14","cited_by_count":0,"area":null},{"id":"2608.01023","title":"Caliber: Cross-Architecture Extraction-Cost Control for Score-Returning APIs","created":"2026-08-02","cited_by_count":0,"area":null},{"id":"2610.13083","title":"The Limits of Query Monitoring against Distributed Model Extraction","created":"2026-10-09","cited_by_count":0,"area":null}],"next_cursor":null}