IDEAL: Query-Efficient Data-Free Learning from Black-box Models
Not on the map. Why?
Abstract (arXiv)
Knowledge Distillation (KD) is a typical method for training a lightweight student model with the help of a well-trained teacher model. However, most KD methods require access to either the teacher's training data or model parameters, which is unrealistic. To tackle this problem, recent works study KD under data-free and black-box settings. Nevertheless, these works require a large number of queries to the teacher model, which incurs significant monetary and computational costs. To address these problems, we propose a novel method called query-effIcient Data-free lEarning from blAck-box modeLs (IDEAL), which aims to query-efficiently learn from black-box model APIs to train a good student without any real data. In detail, IDEAL trains the student model in two stages: data generation and model distillation. Note that IDEAL does not require any query in the data generation stage and queries the teacher only once for each sample in the distillation stage. Extensive experiments on various real-world datasets show the effectiveness of the proposed IDEAL. For instance, IDEAL can improve the performance of the best baseline method DFME by 5.83% on CIFAR10 dataset with only 0.02x the query budget of DFME.
Key facts. Cited by 16 papers in the map (data through 7 Oct 2026). Builds on 31 of its 44 references that are in the map. First posted on arXiv 23 May 2022.
Builds on
31 of 44 references.
References · 31
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2017Fashion-MNIST: a Novel Image Dataset for Benchmarking Machine Learning Algorithmscited by 4,283
- 2014FitNets: Hints for Thin Deep Netscited by 1,619
- 2020Knowledge Distillation: A Surveycited by 1,578
- 2019Dreaming to Distill: Data-free Knowledge Transfer via DeepInversioncited by 419
- 2021Anti-Backdoor Learning: Training Clean Models on Poisoned Datacited by 258
- 2019Data-Free Learning of Student Networkscited by 203
- 2019Zero-shot Knowledge Transfer via Adversarial Belief Matchingcited by 129
- 2020Data-Free Model Extractioncited by 121
19 more
- 2021DENSE: Data-Free One-Shot Federated Learningcited by 100
- 2020MAZE: Data-Free Model Stealing Attack Using Zeroth-Order Gradient Estimationcited by 99
- 2020Generative Low-bitwidth Data Free Quantizationcited by 87
- 2020Heterogeneous Knowledge Distillation using Information Flow Modelingcited by 73
- 2021Contrastive Model Inversion for Data-Free Knowledge Distillationcited by 66
- 2020DaST: Data-free Substitute Training for Adversarial Attackscited by 60
- 2020Inter-Region Affinity Distillation for Road Marking Segmentationcited by 58
- 2019The Knowledge Within: Methods for Data-Free Model Compressioncited by 54
- 2020More Grounded Image Captioning by Distilling Image-Text Matching Modelcited by 43
- 2021Zero-Shot Knowledge Distillation from a Decision-Based Black-Box Modelcited by 37
- 2020Data-Free Knowledge Amalgamation via Group-Stack Dual-GANcited by 32
- 2021Mosaicking to Distill: Knowledge Distillation from Out-of-Domain Datacited by 31
- 2020DE-RRD: A Knowledge Distillation Framework for Recommender Systemcited by 28
- 2021Delving into Data: Effectively Substitute Training for Black-box Attackcited by 27
- 2021Bidirectional Distillation for Top-K Recommender Systemcited by 21
- 2019Dream Distillation: A Data-Independent Model Compression Frameworkcited by 19
- 2021Student Surpasses Teacher: Imitation Attack for Black-Box NLP APIscited by 16
- 2021Privileged Graph Distillation for Cold Start Recommendationcited by 10
- 2020Interpretable Foreground Object Search As Knowledge Distillationcited by 4
Built on by
Citing papers per year: 2023: 6; 2024: 4; 2025: 3; 2026: 3.
16 papers.
Sort:
By area:
- 2023When Foundation Model Meets Federated Learning: Motivations, Challenges, and Future Directionscited by 83
- 2023No One Left Behind: Real-World Federated Class-Incremental Learningcited by 53
- 2023Selective Knowledge Sharing for Privacy-Preserving Federated Distillation without A Good Teachercited by 25
- 2023A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiencycited by 21
- 2023Rethinking Data Distillation: Do Not Overlook Calibrationcited by 13
- 2025Does Training with Synthetic Data Truly Protect Privacy?cited by 12
- 2024Fully Exploiting Every Real Sample: SuperPixel Sample Gradient Model Stealingcited by 5
- 2024Efficient and Effective Model Extractioncited by 4
- 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Taskscited by 4
- 2023Layer-adaptive Structured Pruning Guided by Latencycited by 1
- 2024LDPKiT: Superimposing Remote Queries for Privacy-Preserving Distillationcited by 1
- 2026AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspectivecited by 1
4 more
- 2026Improving Diversity in Black-box Few-shot Knowledge Distillation28 Apr 2026
- 2026Diverse Image Priors for Black-box Data-free Knowledge Distillation28 Apr 2026
- 2026AI Security in the Foundation Model Era: A Comprehensive Survey from a Unified Perspective25 Mar 2026
- 2025Stabilizing Data-Free Model Extraction14 Sep 2025
- 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Tasks24 Apr 2025
- 2025Does Training with Synthetic Data Truly Protect Privacy?18 Feb 2025
- 2024Efficient and Effective Model Extraction21 Sep 2024
- 2024CaBaGe: Data-Free Model Extraction using ClAss BAlanced Generator Ensemble16 Sep 2024
- 2024LDPKiT: Superimposing Remote Queries for Privacy-Preserving Distillation25 May 2024
- 2024Fully Exploiting Every Real Sample: SuperPixel Sample Gradient Model Stealing18 May 2024
- 2023Rethinking Data Distillation: Do Not Overlook Calibration24 Jul 2023
- 2023A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency20 Jul 2023
4 more
- 2023When Foundation Model Meets Federated Learning: Motivations, Challenges, and Future Directions27 Jun 2023
- 2023Layer-adaptive Structured Pruning Guided by Latency23 May 2023
- 2023Selective Knowledge Sharing for Privacy-Preserving Federated Distillation without A Good Teacher4 Apr 2023
- 2023No One Left Behind: Real-World Federated Class-Incremental Learning2 Feb 2023
- 2023When Foundation Model Meets Federated Learning: Motivations, Challenges, and Future Directionscited by 83
- 2023No One Left Behind: Real-World Federated Class-Incremental Learningcited by 53
- 2023Selective Knowledge Sharing for Privacy-Preserving Federated Distillation without A Good Teachercited by 25
- 2023A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiencycited by 21
- 2023Rethinking Data Distillation: Do Not Overlook Calibrationcited by 13
- 2025Does Training with Synthetic Data Truly Protect Privacy?cited by 12
- 2024Fully Exploiting Every Real Sample: SuperPixel Sample Gradient Model Stealingcited by 5
- 2024Efficient and Effective Model Extractioncited by 4
- 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Taskscited by 4
- 2023Layer-adaptive Structured Pruning Guided by Latencycited by 1
- 2024LDPKiT: Superimposing Remote Queries for Privacy-Preserving Distillationcited by 1
- 2024CaBaGe: Data-Free Model Extraction using ClAss BAlanced Generator Ensemblecited by 0
12 most cited of 15 All 15 (JSON)
- 2026Improving Diversity in Black-box Few-shot Knowledge Distillation28 Apr 2026
- 2026Diverse Image Priors for Black-box Data-free Knowledge Distillation28 Apr 2026
- 2025Stabilizing Data-Free Model Extraction14 Sep 2025
- 2025Towards Harnessing the Collaborative Power of Large and Small Models for Domain Tasks24 Apr 2025
- 2025Does Training with Synthetic Data Truly Protect Privacy?18 Feb 2025
- 2024Efficient and Effective Model Extraction21 Sep 2024
- 2024CaBaGe: Data-Free Model Extraction using ClAss BAlanced Generator Ensemble16 Sep 2024
- 2024LDPKiT: Superimposing Remote Queries for Privacy-Preserving Distillation25 May 2024
- 2024Fully Exploiting Every Real Sample: SuperPixel Sample Gradient Model Stealing18 May 2024
- 2023Rethinking Data Distillation: Do Not Overlook Calibration24 Jul 2023
- 2023A Survey of What to Share in Federated Learning: Perspectives on Model Utility, Privacy Leakage, and Communication Efficiency20 Jul 2023
- 2023When Foundation Model Meets Federated Learning: Motivations, Challenges, and Future Directions27 Jun 2023
12 newest of 15 All 15 (JSON)