{"id":"https://openalex.org/W3190076578","doi":null,"title":"Model Extraction in the Context of Audio Classifiers","display_name":"Model Extraction in the Context of Audio Classifiers","publication_year":2021,"publication_date":"2021-06-01","ids":{"openalex":"https://openalex.org/W3190076578","mag":"3190076578"},"language":"en","primary_location":{"id":"pmh:oai:utoronto.scholaris.ca:1807/106489","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/1807/106489","pdf_url":"https://utoronto.scholaris.ca/bitstreams/df44f996-07fc-40ef-b9b0-cbab45308740/download","source":{"id":"https://openalex.org/S4306400261","display_name":"TSpace (University of Toronto)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I185261750","host_organization_name":"University of Toronto","host_organization_lineage":["https://openalex.org/I185261750"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://utoronto.scholaris.ca/bitstreams/df44f996-07fc-40ef-b9b0-cbab45308740/download","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084889013","display_name":"Lucas Bourtoule","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Lucas Bourtoule","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5084889013"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0008999999845400453,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10201","display_name":"Speech Recognition and Synthesis","score":0.0008999999845400453,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/model-extraction","display_name":"model extraction","score":0.8650000095367432},{"id":"https://openalex.org/keywords/query-based-attacks","display_name":"query-based attacks","score":0.593999981880188},{"id":"https://openalex.org/keywords/model-inversion-attacks","display_name":"model inversion attacks","score":0.5},{"id":"https://openalex.org/keywords/generative-models","display_name":"generative models","score":0.5509999990463257},{"id":"https://openalex.org/keywords/query-synthesis","display_name":"query synthesis","score":0.7400000095367432},{"id":"https://openalex.org/keywords/librispeech","display_name":"LibriSpeech","score":0.7110000252723694},{"id":"https://openalex.org/keywords/voxceleb","display_name":"VoxCeleb","score":0.9739999771118164},{"id":"https://openalex.org/keywords/speech-recognition","display_name":"speech recognition","score":0.4350000023841858},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"adversarial learning","score":0.4869999885559082}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5674242973327637},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.500281572341919},{"id":"https://openalex.org/C4725764","wikidata":"https://www.wikidata.org/wiki/Q844704","display_name":"Extraction (chemistry)","level":2,"score":0.49076923727989197},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.47710758447647095},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4337111711502075},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.10030287504196167},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.09614109992980957},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.05848050117492676},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:utoronto.scholaris.ca:1807/106489","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/1807/106489","pdf_url":"https://utoronto.scholaris.ca/bitstreams/df44f996-07fc-40ef-b9b0-cbab45308740/download","source":{"id":"https://openalex.org/S4306400261","display_name":"TSpace (University of Toronto)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I185261750","host_organization_name":"University of Toronto","host_organization_lineage":["https://openalex.org/I185261750"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis"},{"id":"mag:3190076578","doi":null,"is_oa":false,"landing_page_url":"https://tspace.library.utoronto.ca/bitstream/1807/106489/4/Bourtoule_Lucas_Benoit%20Jacques_202106_MAS_thesis.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:utoronto.scholaris.ca:1807/106489","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/1807/106489","pdf_url":"https://utoronto.scholaris.ca/bitstreams/df44f996-07fc-40ef-b9b0-cbab45308740/download","source":{"id":"https://openalex.org/S4306400261","display_name":"TSpace (University of Toronto)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I185261750","host_organization_name":"University of Toronto","host_organization_lineage":["https://openalex.org/I185261750"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3190076578.pdf","grobid_xml":"https://content.openalex.org/works/W3190076578.grobid-xml"},"referenced_works_count":61,"referenced_works":["https://openalex.org/W1494198834","https://openalex.org/W1498436455","https://openalex.org/W1673923490","https://openalex.org/W1690739335","https://openalex.org/W1821462560","https://openalex.org/W1825675169","https://openalex.org/W1849277567","https://openalex.org/W1922655562","https://openalex.org/W1936454270","https://openalex.org/W2006267758","https://openalex.org/W2007562169","https://openalex.org/W2059652044","https://openalex.org/W2100960835","https://openalex.org/W2135930857","https://openalex.org/W2149933564","https://openalex.org/W2160815625","https://openalex.org/W2162552722","https://openalex.org/W2169393322","https://openalex.org/W2173520492","https://openalex.org/W2296452361","https://openalex.org/W2300770211","https://openalex.org/W2302255633","https://openalex.org/W2335728318","https://openalex.org/W2462906003","https://openalex.org/W2535873859","https://openalex.org/W2561238782","https://openalex.org/W2616028256","https://openalex.org/W2620998106","https://openalex.org/W2729906263","https://openalex.org/W2738841453","https://openalex.org/W2748789698","https://openalex.org/W2765407302","https://openalex.org/W2766966408","https://openalex.org/W2767951891","https://openalex.org/W2775304348","https://openalex.org/W2783113218","https://openalex.org/W2796004214","https://openalex.org/W2798302089","https://openalex.org/W2799016299","https://openalex.org/W2890753317","https://openalex.org/W2893425640","https://openalex.org/W2896457183","https://openalex.org/W2898350943","https://openalex.org/W2904367110","https://openalex.org/W2934843808","https://openalex.org/W2948223045","https://openalex.org/W2962763344","https://openalex.org/W2963341956","https://openalex.org/W2963403664","https://openalex.org/W2963564844","https://openalex.org/W2964137095","https://openalex.org/W2964153729","https://openalex.org/W2964318098","https://openalex.org/W2981828710","https://openalex.org/W2995525544","https://openalex.org/W3023663521","https://openalex.org/W3034368386","https://openalex.org/W3091401866","https://openalex.org/W3109310454","https://openalex.org/W3118608800","https://openalex.org/W3154155772"],"related_works":["https://openalex.org/W4288099474","https://openalex.org/W3124209769","https://openalex.org/W4310511526","https://openalex.org/W7098731376","https://openalex.org/W7006584081","https://openalex.org/W7155035088","https://openalex.org/W2891774097","https://openalex.org/W3088430570","https://openalex.org/W2800292890","https://openalex.org/W2749824304"],"abstract_inverted_index":{"Model":[0],"extraction":[1,55,105],"is":[2,62],"the":[3,7,28,32,64,87],"process":[4],"of":[5,9,24,115,143,148],"reverse-engineering":[6],"parameters":[8],"a":[10,16,102,112,128,135,140,146],"machine":[11],"learning":[12,43],"model":[13,54,89,130],"exposed":[14],"through":[15],"query":[17,86],"interface.":[18],"Prior":[19],"work":[20],"on":[21,27,132],"this":[22,98,121],"class":[23],"attacks":[25,56],"focuses":[26],"vision":[29,47,210],"domain":[30],"for":[31],"most":[33],"part.":[34],"We":[35],"demonstrate":[36],"that":[37,63],"subtle,":[38],"yet":[39],"crucial,":[40],"distinctions":[41],"between":[42],"from":[44,50],"audio":[45,70,79,243],"and":[46],"preclude":[48],"us":[49],"directly":[51],"applying":[52],"existing":[53],"to":[57,73,84,90,110,126],"audio.":[58],"A":[59],"key":[60],"example":[61],"discriminative":[65],"features":[66],"learned":[67],"by":[68],"raw":[69],"models":[71,80,109],"appear":[72],"be":[74],"more":[75],"task-dependent.":[76],"To":[77,97],"extract":[78,127],"we":[81,100],"thus":[82],"need":[83],"carefully":[85],"victim":[88,129],"expose":[91],"these":[92],"task-specific":[93],"or":[94],"difficult-to-learn":[95],"representations.":[96],"end,":[99],"propose":[101],"simple":[103,279],"task-dependent":[104],"approach":[106,122],"using":[107,134],"generative":[108],"synthesize":[111],"diverse":[113],"pool":[114],"candidate":[116],"queries.":[117,150],"Our":[118],"experimentation":[119],"shows":[120],"makes":[123],"it":[124],"possible":[125],"trained":[131],"LibriSpeech":[133,317],"surrogate":[136],"dataset,":[137],"Voxceleb":[138],"with":[139],"test":[141],"accuracy":[142],"76.51%":[144],"given":[145],"budget":[147,335],"3M":[149],"L'extraction":[151,255],"de":[152,172,191,197,205,208,220,248,256,262,282,293,298,322,324,330,336,339],"mod\u00e8les":[153,238,257,290],"correspond":[154],"au":[155],"processus":[156],"visant":[157],"\u00e0":[158,251,285,318],"reconstruire":[159],"par":[160,228,236],"r\u00e9tro-ing\u00e9nierie":[161],"les":[162,203,232,237,268,302],"param\u00e8tres":[163],"d'un":[164,320],"mod\u00e8le":[165,313],"d'apprentissage":[166],"automatique":[167],"accessible":[168],"via":[169],"une":[170,276,328],"interface":[171],"requ\u00eate.":[173],"Les":[174],"travaux":[175],"ant\u00e9rieurs":[176],"men\u00e9s":[177],"sur":[178,188,240,316],"cette":[179],"classe":[180],"d'attaques":[181],"se":[182],"sont":[183],"concentr\u00e9s":[184],"pour":[185,301],"la":[186,192,209,249,283],"plupart":[187],"le":[189,218,229],"domaine":[190],"vision.":[193,254],"Nous":[194],"d\u00e9montrons":[195],"l'existence":[196],"diff\u00e9rences":[198],"subtiles":[199],"mais":[200],"cruciales":[201],"entre":[202],"domaines":[204],"l'audio":[206],"et":[207,280,333],"qui":[211,266,287],"emp\u00eachent":[212],"l'application":[213],"des":[214,241,289],"techniques":[215],"existantes":[216],"dans":[217],"cadre":[219],"l'audio.":[221],"Un":[222],"exemple":[223],"marquant":[224],"nous":[225,274],"est":[226],"donn\u00e9":[227],"fait":[230],"que":[231,307],"caract\u00e9ristiques":[233],"discriminantes":[234],"apprises":[235],"travaillant":[239],"donn\u00e9es":[242,323],"brutes":[244],"semblent":[245],"plus":[246],"d\u00e9pendantes":[247],"t\u00e2che":[250,284],"r\u00e9soudre":[252,286],"qu'en":[253],"d'audio":[258],"n\u00e9cessite":[259],"ainsi":[260],"l'utilisation":[261],"requ\u00eates":[263],"bien":[264],"choisies":[265],"exposent":[267],"repr\u00e9sentations":[269],"apprises.":[270],"Dans":[271],"ce":[272],"but,":[273],"proposons":[275],"approche":[277,309],"d'extraction":[278],"d\u00e9pendante":[281],"utilise":[288],"g\u00e9n\u00e9ratifs":[291],"afin":[292],"synth\u00e9tiser":[294],"un":[295,312,334],"ensemble":[296],"divers":[297],"signaux":[299],"candidats":[300],"requ\u00eates.":[303,340],"Nos":[304],"exp\u00e9riences":[305],"montrent":[306],"notre":[308],"permet":[310],"d'extraire":[311],"cible":[314],"entra\u00een\u00e9":[315],"l'aide":[319],"jeu":[321],"substitution,":[325],"Voxceleb,":[326],"avec":[327],"pr\u00e9cision":[329],"76,51":[331],"%":[332],"3":[337],"millions":[338]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2021-08-16T00:00:00"}