{"id":"https://openalex.org/W4392903534","doi":"https://doi.org/10.1109/icassp48485.2024.10447550","title":"Poisoning-Free Defense Against Black-Box Model Extraction","display_name":"Poisoning-Free Defense Against Black-Box Model Extraction","publication_year":2024,"publication_date":"2024-03-18","ids":{"openalex":"https://openalex.org/W4392903534","doi":"https://doi.org/10.1109/icassp48485.2024.10447550"},"language":"en","primary_location":{"id":"doi:10.1109/icassp48485.2024.10447550","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp48485.2024.10447550","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2024 - 2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://figshare.com/articles/conference_contribution/Poisoning-Free_Defense_Against_Black-Box_Model_Extraction/26888683","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102909652","display_name":"Haitian Zhang","orcid":"https://orcid.org/0009-0005-9151-7543"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haitian Zhang","raw_affiliation_strings":["Wuhan University,School of Electronic Information,China","School of Electronic Information, Wuhan University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University,School of Electronic Information,China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"School of Electronic Information, Wuhan University, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068604294","display_name":"Guang Hua","orcid":"https://orcid.org/0000-0001-5184-4359"},"institutions":[{"id":"https://openalex.org/I168639165","display_name":"Singapore Institute of Technology","ror":"https://ror.org/01v2c2791","country_code":"SG","type":"education","lineage":["https://openalex.org/I168639165"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Guang Hua","raw_affiliation_strings":["Singapore Institute of Technology,ICT Cluster,Singapore","ICT Cluster, Singapore Institute of Technology, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Singapore Institute of Technology,ICT Cluster,Singapore","institution_ids":["https://openalex.org/I168639165"]},{"raw_affiliation_string":"ICT Cluster, Singapore Institute of Technology, Singapore","institution_ids":["https://openalex.org/I168639165"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069540177","display_name":"Wen Yang","orcid":"https://orcid.org/0000-0002-3263-8768"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wen Yang","raw_affiliation_strings":["Wuhan University,School of Electronic Information,China","School of Electronic Information, Wuhan University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Wuhan University,School of Electronic Information,China","institution_ids":["https://openalex.org/I37461747"]},{"raw_affiliation_string":"School of Electronic Information, Wuhan University, China","institution_ids":["https://openalex.org/I37461747"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.3543,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.4756623,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"4760","last_page":"4764"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9797999858856201,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9696000218391418,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.812574565410614},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7444921731948853},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.687409520149231},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5671684145927429},{"id":"https://openalex.org/keywords/fidelity","display_name":"Fidelity","score":0.49986886978149414},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.48960405588150024},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4807053208351135},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4645428955554962},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.45526647567749023},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.42818740010261536},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4267692565917969},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.4136430025100708},{"id":"https://openalex.org/keywords/high-fidelity","display_name":"High fidelity","score":0.41184180974960327},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.38320639729499817},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.16262701153755188},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.07950511574745178}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.812574565410614},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7444921731948853},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.687409520149231},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5671684145927429},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.49986886978149414},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.48960405588150024},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4807053208351135},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4645428955554962},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45526647567749023},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.42818740010261536},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4267692565917969},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.4136430025100708},{"id":"https://openalex.org/C113364801","wikidata":"https://www.wikidata.org/wiki/Q26674","display_name":"High fidelity","level":2,"score":0.41184180974960327},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38320639729499817},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.16262701153755188},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.07950511574745178},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/icassp48485.2024.10447550","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icassp48485.2024.10447550","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICASSP 2024 - 2024 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","raw_type":"proceedings-article"},{"id":"pmh:oai:figshare.com:article/26888683","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/Poisoning-Free_Defense_Against_Black-Box_Model_Extraction/26888683","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference contribution"}],"best_oa_location":{"id":"pmh:oai:figshare.com:article/26888683","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/Poisoning-Free_Defense_Against_Black-Box_Model_Extraction/26888683","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference contribution"},"sustainable_development_goals":[{"score":0.4699999988079071,"display_name":"Gender equality","id":"https://metadata.un.org/sdg/5"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W2096733369","https://openalex.org/W2603766943","https://openalex.org/W2963303354","https://openalex.org/W2969695741","https://openalex.org/W2973414778","https://openalex.org/W2997146418","https://openalex.org/W3035379805","https://openalex.org/W3132598136","https://openalex.org/W3141043040","https://openalex.org/W3168455774","https://openalex.org/W3174136778","https://openalex.org/W3175685622","https://openalex.org/W3178659068","https://openalex.org/W3206880386","https://openalex.org/W4200633448","https://openalex.org/W4288083516","https://openalex.org/W4312343407","https://openalex.org/W4313172341","https://openalex.org/W4319878939","https://openalex.org/W6684191040","https://openalex.org/W6772101090","https://openalex.org/W6774150056","https://openalex.org/W6775078712"],"related_works":["https://openalex.org/W3009622996","https://openalex.org/W3037859390","https://openalex.org/W4313443006","https://openalex.org/W2945374968","https://openalex.org/W4385452045","https://openalex.org/W4293777179","https://openalex.org/W2164070813","https://openalex.org/W2135608140","https://openalex.org/W2895525995","https://openalex.org/W4224231624"],"abstract_inverted_index":{"Recent":[0],"research":[1],"has":[2],"shown":[3],"that":[4,83],"an":[5,71],"adversary":[6],"can":[7],"use":[8],"a":[9,17],"surrogate":[10,43],"model":[11,21],"to":[12,40,47],"steal":[13],"the":[14,24,32,42,49,54,60,77,85,100,112,115],"functionality":[15],"of":[16,56,62,88,95,114],"target":[18],"deep":[19],"learning":[20],"even":[22],"under":[23],"black-box":[25],"condition":[26],"and":[27,106],"without":[28],"data":[29],"curation,":[30],"while":[31,92],"existing":[33],"defense":[34,50],"mainly":[35],"relies":[36],"on":[37],"API":[38,107],"poisoning":[39],"disturb":[41],"training.":[44],"Unfortunately,":[45],"due":[46],"poisoning,":[48],"is":[51,119],"achieved":[52],"at":[53,121],"price":[55],"fidelity":[57],"loss,":[58],"sacrificing":[59],"interests":[61],"honest":[63],"users.":[64],"To":[65],"solve":[66],"this":[67],"problem,":[68],"we":[69],"propose":[70],"Adversarial":[72],"Fine-Tuning":[73],"(AdvFT)":[74],"framework,":[75],"incorporating":[76],"generative":[78],"adversarial":[79],"network":[80],"(GAN)":[81],"structure":[82],"disturbs":[84],"feature":[86],"representations":[87],"out-of-distribution":[89],"(OOD)":[90],"queries":[91],"preserving":[93],"those":[94],"in-distribution":[96],"(ID)":[97],"ones,":[98],"circumventing":[99],"need":[101],"for":[102],"OOD":[103],"sample":[104],"collection":[105],"poisoning.":[108],"Extensive":[109],"experiments":[110],"verify":[111],"effectiveness":[113],"proposed":[116],"framework.":[117],"Code":[118],"available":[120],"github.com/Hatins/AdvFT.":[122]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}