.png){kind=icon}
返回
Holistic Implicit Factor Evaluation of Model Extraction Attacks
.png){kind=icon}
PRE
AI
DOI：10.1109/TDSC.2022.3231271.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Model extraction attacks (MEAs) allow adversaries to replicate a surrogate model analogous to the target model's decision pattern. While several attacks and defenses have been studied in-depth, the underlying reasons behind our susceptibility to them often remain unclear. Analyzing these implication influence factors helps to promote secure deep learning (DL) systems, it requires studying extraction attacks in various scenarios to determine the success of different attacks and the hallmarks of DLs. However, understanding, implementing, and evaluating even a single attack requires extremely high technical effort, making it impractical to study the vast number of unique extraction attack scenarios. To this end, we present a first-of-its-kind holistic evaluation of implication factors for MEAs which relies on the attack process abstracted from state-of-the-art MEAs. Specifically, we concentrate on four perspectives. we consider the impact of the task accuracy, model architecture, and robustness of the target model on MEAs, as well as the impact of the model architecture of the surrogate model on MEAs. Our empirical evaluation includes an ablation study over sixteen model architectures and four image datasets. Surprisingly, our study shows that improving the robustness of the target model via adversarial training is more vulnerable to model extraction attacks.
Keyword:
Predictive models
Analytical models
Computational modeling
Task analysis
Training
Computer architecture
Mathematical models
Model extraction attacks
evaluation
implicit factors
期刊
IF:
7.5
论文数:
2.5K
被引数:
9.6K
机构
引用论文
.png){kind=icon}
分享收藏
查看更多内容