{"id":"https://openalex.org/W4416249455","doi":"https://doi.org/10.1109/ijcnn64981.2025.11228005","title":"DAV: An Adaptive Defense Framework for Model Extraction Attacks","display_name":"DAV: An Adaptive Defense Framework for Model Extraction Attacks","publication_year":2025,"publication_date":"2025-06-30","ids":{"openalex":"https://openalex.org/W4416249455","doi":"https://doi.org/10.1109/ijcnn64981.2025.11228005"},"language":null,"primary_location":{"id":"doi:10.1109/ijcnn64981.2025.11228005","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn64981.2025.11228005","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120354447","display_name":"Peng Sui","orcid":null},"institutions":[{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Sui","raw_affiliation_strings":["Hangzhou Dianzi University,School of Computer Science,Hangzhou,China,310018"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hangzhou Dianzi University,School of Computer Science,Hangzhou,China,310018","institution_ids":["https://openalex.org/I50760025"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049417152","display_name":"Jiapeng Zhou","orcid":"https://orcid.org/0000-0002-9028-8575"},"institutions":[{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiapeng Zhou","raw_affiliation_strings":["Hangzhou Dianzi University,School of Computer Science,Hangzhou,China,310018"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hangzhou Dianzi University,School of Computer Science,Hangzhou,China,310018","institution_ids":["https://openalex.org/I50760025"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100656449","display_name":"Yu Chen","orcid":"https://orcid.org/0000-0001-9651-9875"},"institutions":[{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Chen","raw_affiliation_strings":["Hangzhou Dianzi University,School of Computer Science,Hangzhou,China,310018"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hangzhou Dianzi University,School of Computer Science,Hangzhou,China,310018","institution_ids":["https://openalex.org/I50760025"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052321895","display_name":"Youhuizi Li","orcid":"https://orcid.org/0000-0003-0042-7218"},"institutions":[{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Youhuizi Li","raw_affiliation_strings":["Hangzhou Dianzi University,School of Computer Science,Hangzhou,China,310018"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hangzhou Dianzi University,School of Computer Science,Hangzhou,China,310018","institution_ids":["https://openalex.org/I50760025"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I50760025"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6115000247955322,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6115000247955322,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.05990000069141388,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.05959999933838844,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5716999769210815},{"id":"https://openalex.org/keywords/proxy","display_name":"Proxy (statistics)","score":0.46959999203681946},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.3671000003814697},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.31929999589920044},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.30709999799728394},{"id":"https://openalex.org/keywords/generative-model","display_name":"Generative model","score":0.30559998750686646},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2833000123500824}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7355999946594238},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5716999769210815},{"id":"https://openalex.org/C2780148112","wikidata":"https://www.wikidata.org/wiki/Q1432581","display_name":"Proxy (statistics)","level":2,"score":0.46959999203681946},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.45320001244544983},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4009999930858612},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3785000145435333},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.3671000003814697},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.31929999589920044},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.30709999799728394},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.30559998750686646},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2833000123500824},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.2802000045776367},{"id":"https://openalex.org/C177918212","wikidata":"https://www.wikidata.org/wiki/Q803623","display_name":"Perturbation (astronomy)","level":2,"score":0.2800000011920929},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27570000290870667},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.27469998598098755},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.2599000036716461},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.25519999861717224},{"id":"https://openalex.org/C52970973","wikidata":"https://www.wikidata.org/wiki/Q2497134","display_name":"Adaptive system","level":2,"score":0.2517000138759613}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn64981.2025.11228005","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn64981.2025.11228005","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W2051267297","https://openalex.org/W2112796928","https://openalex.org/W2535690855","https://openalex.org/W2603766943","https://openalex.org/W2897830718","https://openalex.org/W2963465081","https://openalex.org/W2963542245","https://openalex.org/W2964081807","https://openalex.org/W2969695741","https://openalex.org/W2973414778","https://openalex.org/W2997146418","https://openalex.org/W3007318395","https://openalex.org/W3035379805","https://openalex.org/W3178659068","https://openalex.org/W4288057808","https://openalex.org/W4360898063","https://openalex.org/W4382317858","https://openalex.org/W4385080307","https://openalex.org/W4392942755","https://openalex.org/W4402727461"],"related_works":[],"abstract_inverted_index":{"Machine":[0],"learning":[1],"platforms":[2],"offer":[3],"paid":[4],"APIs":[5],"to":[6,33],"enable":[7],"personalized":[8],"inference":[9],"services.":[10],"However,":[11],"model":[12,122,132],"extraction":[13],"attacks":[14,53],"greatly":[15],"threaten":[16],"their":[17],"intellectual":[18],"property":[19],"rights.":[20],"Malicious":[21],"users":[22],"can":[23,83,114],"create":[24],"query":[25,73,94],"samples":[26],"using":[27],"proxy":[28],"datasets":[29],"or":[30,145],"generative":[31],"models":[32,44],"train":[34],"a":[35,71],"clone":[36,121],"model.":[37],"Existing":[38],"defense":[39,64],"approaches":[40],"usually":[41],"focus":[42],"on":[43,87,126],"that":[45,112],"return":[46],"soft-labels,":[47],"and":[48,75,91,103,133],"cannot":[49],"effectively":[50],"handle":[51],"extracting":[52],"against":[54],"hard-label":[55],"models.":[56],"In":[57],"this":[58],"paper,":[59],"we":[60],"propose":[61],"an":[62,76],"adaptive":[63,77],"framework":[65],"named":[66],"DAV,":[67],"which":[68],"consists":[69],"of":[70,119,129],"malicious":[72,93],"detector":[74],"perturbation":[78,81,102],"mechanism.":[79],"Two":[80],"strategies":[82],"be":[84],"selected":[85],"based":[86],"the":[88,92,97,117,120,127,130,139],"detection":[89],"results":[90,110],"rate":[95],"within":[96],"buffer":[98],"queue,":[99],"including":[100],"accuracy-preserving":[101],"maximum-minimum":[104],"probability":[105],"inverse":[106],"perturbation.":[107],"Comprehensive":[108],"experimental":[109],"show":[111],"DAV":[113],"significantly":[115],"reduce":[116],"accuracy":[118],"with":[123],"little":[124],"impact":[125],"performance":[128],"victim":[131],"benign":[134],"queries,":[135],"no":[136],"matter":[137],"whether":[138],"returned":[140],"probabilities":[141],"are":[142],"for":[143],"soft-label":[144],"hard-label.":[146]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-11-14T00:00:00"}