{"total":58,"rows":[{"id":"2310.19596","title":"LLMaAA: Making Large Language Models as Active Annotators","created":"2023-10-30","cited_by_count":79,"area":null},{"id":"2206.08451","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","created":"2022-06-16","cited_by_count":75,"area":null},{"id":"2310.19342","title":"Label-Only Model Inversion Attacks via Knowledge Transfer","created":"2023-10-30","cited_by_count":21,"area":null},{"id":"2309.10058","title":"Dual Student Networks for Data-Free Model Stealing","created":"2023-09-18","cited_by_count":17,"area":null},{"id":"2302.08466","title":"Marich: A Query-efficient Distributionally Equivalent Model Extraction Attack using Public Data","created":"2023-02-16","cited_by_count":11,"area":null},{"id":"2308.00958","title":"Isolation and Induction: Training Robust Deep Neural Networks against Model Stealing Attacks","created":"2023-08-02","cited_by_count":10,"area":null},{"id":"2403.14772","title":"Improving Robustness to Model Inversion Attacks via Sparse Coding Architectures","created":"2024-03-21","cited_by_count":8,"area":null},{"id":"2506.02362","title":"MISLEADER: Defending against Model Extraction with Ensembles of Distilled Models","created":"2025-06-03","cited_by_count":8,"area":null},{"id":"2303.07775","title":"Data-Free Sketch-Based Image Retrieval","created":"2023-03-14","cited_by_count":7,"area":null},{"id":"2405.02365","title":"ModelShield: Adaptive and Robust Watermark against Model Extraction Attack","created":"2024-05-03","cited_by_count":7,"area":"safety"},{"id":"2310.17534","title":"SoK: Pitfalls in Evaluating Black-Box Attacks","created":"2023-10-26","cited_by_count":6,"area":null},{"id":"2311.04588","title":"Army of Thieves: Enhancing Black-Box Model Extraction via Ensemble based sample selection","created":"2023-11-08","cited_by_count":6,"area":null},{"id":"2311.11796","title":"Beyond Boundaries: A Comprehensive Survey of Transferable Attacks on AI Systems","created":"2023-11-20","cited_by_count":6,"area":"safety"},{"id":"2312.05924","title":"Data-Free Hard-Label Robustness Stealing Attack","created":"2023-12-10","cited_by_count":6,"area":null},{"id":"2501.01090","title":"HoneypotNet: Backdoor Attacks Against Model Extraction","created":"2025-01-02","cited_by_count":6,"area":null},{"id":"2503.00383","title":"Theoretical Insights in Model Inversion Robustness and Conditional Entropy Maximization for Collaborative Inference Systems","created":"2025-03-01","cited_by_count":6,"area":null},{"id":"2306.08909","title":"Bridging the Gap between Decision and Logits in Decision-based Knowledge Distillation for Pre-trained Language Models","created":"2023-06-15","cited_by_count":5,"area":"distill"},{"id":"2406.18540","title":"Fully Exploiting Every Real Sample: SuperPixel Sample Gradient Model Stealing","created":"2024-05-18","cited_by_count":5,"area":null},{"id":"2409.03741","title":"Understanding Data Importance in Machine Learning Attacks: Does Valuable Data Pose Greater Harm?","created":"2024-09-05","cited_by_count":5,"area":"safety"},{"id":"2502.20924","title":"Decoder Gradient Shield: Provable and High-Fidelity Prevention of Gradient-Based Box-Free Watermark Removal","created":"2025-02-28","cited_by_count":5,"area":null},{"id":"2506.07888","title":"SoK: Data Reconstruction Attacks Against Machine Learning Models: Definition, Metrics, and Benchmark","created":"2025-06-09","cited_by_count":5,"area":null},{"id":"2504.17421","title":"Towards Harnessing the Collaborative Power of Large and Small Models for Domain Tasks","created":"2025-04-24","cited_by_count":4,"area":null},{"id":"2510.27186","title":"Sparse Model Inversion: Efficient Inversion of Vision Transformers for Data-Free Applications","created":"2025-10-31","cited_by_count":4,"area":null},{"id":"2306.11338","title":"FDINet: Protecting against DNN Model Extraction via Feature Distortion Index","created":"2023-06-20","cited_by_count":3,"area":null},{"id":"2308.16562","title":"The Power of MEME: Adversarial Malware Creation with Model-Based Reinforcement Learning","created":"2023-08-31","cited_by_count":3,"area":null},{"id":"2405.07004","title":"Stealthy Imitation: Reward-guided Environment-free Policy Stealing","created":"2024-05-11","cited_by_count":3,"area":"alignment"},{"id":"2407.16164","title":"Representation Magnitude has a Liability to Privacy Vulnerability","created":"2024-07-23","cited_by_count":3,"area":null},{"id":"2409.01952","title":"Exploiting the Vulnerability of Large Language Models via Defense-Aware Architectural Backdoor","created":"2024-09-03","cited_by_count":3,"area":"safety"},{"id":"2211.01579","title":"Data-free Defense of Black Box Models Against Adversarial Attacks","created":"2022-11-03","cited_by_count":2,"area":null},{"id":"2302.03807","title":"A Prototype-Oriented Clustering for Domain Shift with Source Privacy","created":"2023-02-08","cited_by_count":2,"area":null},{"id":"2310.00096","title":"Towards Few-Call Model Stealing via Active Self-Paced Knowledge Distillation and Diffusion-Based Image Generation","created":"2023-09-29","cited_by_count":2,"area":"diffusion"},{"id":"2410.00059","title":"IDEA: An Inverse Domain Expert Adaptation Based Active DNN IP Protection Method","created":"2024-09-29","cited_by_count":2,"area":null},{"id":"2502.18077","title":"Examining the Threat Landscape: Foundation Models and Model Stealing","created":"2025-02-25","cited_by_count":2,"area":null},{"id":"2512.16439","title":"From Essence to Defense: Adaptive Semantic-aware Watermarking for Embedding-as-a-Service Copyright Protection","created":"2025-12-18","cited_by_count":2,"area":null},{"id":"2307.12872","title":"Latent Code Augmentation Based on Stable Diffusion for Data-free Substitute Attacks","created":"2023-07-24","cited_by_count":1,"area":"diffusion"},{"id":"2309.01838","title":"Efficient Defense Against Model Stealing Attacks on Convolutional Neural Networks","created":"2023-09-04","cited_by_count":1,"area":null},{"id":"2408.02140","title":"VidModEx: Interpretable and Efficient Black Box Model Extraction for High-Dimensional Spaces","created":"2024-08-04","cited_by_count":1,"area":null},{"id":"2502.19502","title":"Models That Are Interpretable But Not Transparent","created":"2025-02-26","cited_by_count":1,"area":null},{"id":"2503.12497","title":"D-ADD: An Effective Plug-In for Defending Against Model Stealing","created":"2025-03-16","cited_by_count":1,"area":null},{"id":"2503.18081","title":"Model-Guardian: Protecting against Data-Free Model Stealing Using Gradient Representations and Deceptive Predictions","created":"2025-03-23","cited_by_count":1,"area":null},{"id":"2601.11952","title":"Decoder Gradient Shields: A Family of Provable and High-Fidelity Methods Against Gradient-Based Box-Free Watermark Removal","created":"2026-01-17","cited_by_count":1,"area":null},{"id":"2603.24857","title":"AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective","created":"2026-03-25","cited_by_count":1,"area":"safety"},{"id":"2211.13171","title":"Query Efficient Cross-Dataset Transferable Black-Box Attack on Action Recognition","created":"2022-11-23","cited_by_count":0,"area":null},{"id":"2307.10997","title":"DREAM: Domain-free Reverse Engineering Attributes of Black-box Model","created":"2023-07-20","cited_by_count":0,"area":null},{"id":"2312.10943","title":"Model Stealing Attack against Graph Classification with Authenticity, Uncertainty and Diversity","created":"2023-12-18","cited_by_count":0,"area":null},{"id":"2406.00828","title":"Imitating the Functionality of Image-to-Image Models Using a Single Example","created":"2024-06-02","cited_by_count":0,"area":null},{"id":"2409.10643","title":"CaBaGe: Data-Free Model Extraction using ClAss BAlanced Generator Ensemble","created":"2024-09-16","cited_by_count":0,"area":null},{"id":"2411.09359","title":"Your Semantic-Independent Watermark is Fragile: A Semantic Perturbation Attack against EaaS Watermark","created":"2024-11-14","cited_by_count":0,"area":null},{"id":"2501.09328","title":"Neural Honeytrace: Plug&Play Watermarking Framework against Model Extraction Attacks","created":"2025-01-16","cited_by_count":0,"area":"safety"},{"id":"2503.06188","title":"Attackers Can Do Better: Over- and Understated Factors of Model Stealing Attacks","created":"2025-03-08","cited_by_count":0,"area":null},{"id":"2506.05867","title":"Stealix: Model Stealing via Prompt Evolution","created":"2025-06-06","cited_by_count":0,"area":null},{"id":"2506.07590","title":"Explore the vulnerability of black-box models via diffusion models","created":"2025-06-09","cited_by_count":0,"area":"diffusion"},{"id":"2508.21654","title":"I Stolenly Swear That I Am Up to (No) Good: Design and Evaluation of Model Stealing Attacks","created":"2025-08-29","cited_by_count":0,"area":null},{"id":"2509.11159","title":"Stabilizing Data-Free Model Extraction","created":"2025-09-14","cited_by_count":0,"area":null},{"id":"2511.04215","title":"Black-Box Guardrail Reverse-engineering Attack","created":"2025-11-06","cited_by_count":0,"area":"safety"},{"id":"2512.23948","title":"DivQAT: Enhancing Robustness of Quantized Convolutional Neural Networks against Model Extraction Attacks","created":"2025-12-30","cited_by_count":0,"area":null},{"id":"2601.01688","title":"DiMEx: Breaking the Cold Start Barrier in Data-Free Model Extraction via Latent Diffusion Priors","created":"2026-01-04","cited_by_count":0,"area":"diffusion"},{"id":"2606.11698","title":"T2S: A Rehearsal-Based Approach for Extraction-Resistant Model Watermarking","created":"2026-06-10","cited_by_count":0,"area":"safety"}],"next_cursor":null}