{"id":"https://openalex.org/W4411949930","doi":"https://doi.org/10.1109/iwcmc65282.2025.11059639","title":"RADEP: A Resilient Adaptive Defense Framework Against Model Extraction Attacks","display_name":"RADEP: A Resilient Adaptive Defense Framework Against Model Extraction Attacks","publication_year":2025,"publication_date":"2025-05-12","ids":{"openalex":"https://openalex.org/W4411949930","doi":"https://doi.org/10.1109/iwcmc65282.2025.11059639"},"language":"en","primary_location":{"id":"doi:10.1109/iwcmc65282.2025.11059639","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iwcmc65282.2025.11059639","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Wireless Communications and Mobile Computing (IWCMC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114165393","display_name":"Amit Chakraborty","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Amit Chakraborty","raw_affiliation_strings":["Asansol Engineering College,Department of CSBS,Asansol,West Bengal,India,713305"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Asansol Engineering College,Department of CSBS,Asansol,West Bengal,India,713305","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001461808","display_name":"Sayyed Farid Ahamed","orcid":null},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sayyed Farid Ahamed","raw_affiliation_strings":["Old Dominion University,Center for Secure &#x0026; Intelligent Critical Systems,Virginia,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Old Dominion University,Center for Secure &#x0026; Intelligent Critical Systems,Virginia,USA","institution_ids":["https://openalex.org/I81365321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083317923","display_name":"Sandip Roy","orcid":"https://orcid.org/0000-0002-5447-803X"},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sandip Roy","raw_affiliation_strings":["Old Dominion University,Center for Secure &#x0026; Intelligent Critical Systems,Virginia,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Old Dominion University,Center for Secure &#x0026; Intelligent Critical Systems,Virginia,USA","institution_ids":["https://openalex.org/I81365321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047931012","display_name":"Soumya Banerjee","orcid":null},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Soumya Banerjee","raw_affiliation_strings":["Old Dominion University,Center for Secure &#x0026; Intelligent Critical Systems,Virginia,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Old Dominion University,Center for Secure &#x0026; Intelligent Critical Systems,Virginia,USA","institution_ids":["https://openalex.org/I81365321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112894516","display_name":"Kevin Choi","orcid":null},"institutions":[{"id":"https://openalex.org/I145325580","display_name":"Deloitte (United States)","ror":"https://ror.org/03xkm6e60","country_code":"US","type":"company","lineage":["https://openalex.org/I145325580","https://openalex.org/I4210139068"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kevin Choi","raw_affiliation_strings":["Deloitte &#x0026; Touche LLP"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Deloitte &#x0026; Touche LLP","institution_ids":["https://openalex.org/I145325580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091742537","display_name":"Abdul Rahim Abdul Rahman","orcid":"https://orcid.org/0000-0003-4446-2090"},"institutions":[{"id":"https://openalex.org/I145325580","display_name":"Deloitte (United States)","ror":"https://ror.org/03xkm6e60","country_code":"US","type":"company","lineage":["https://openalex.org/I145325580","https://openalex.org/I4210139068"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abdul Rahman","raw_affiliation_strings":["Deloitte &#x0026; Touche LLP"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Deloitte &#x0026; Touche LLP","institution_ids":["https://openalex.org/I145325580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110304507","display_name":"Alison W. Hu","orcid":null},"institutions":[{"id":"https://openalex.org/I145325580","display_name":"Deloitte (United States)","ror":"https://ror.org/03xkm6e60","country_code":"US","type":"company","lineage":["https://openalex.org/I145325580","https://openalex.org/I4210139068"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alison Hu","raw_affiliation_strings":["Deloitte &#x0026; Touche LLP"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Deloitte &#x0026; Touche LLP","institution_ids":["https://openalex.org/I145325580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078074716","display_name":"Edward Bowen","orcid":null},"institutions":[{"id":"https://openalex.org/I145325580","display_name":"Deloitte (United States)","ror":"https://ror.org/03xkm6e60","country_code":"US","type":"company","lineage":["https://openalex.org/I145325580","https://openalex.org/I4210139068"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Edward Bowen","raw_affiliation_strings":["Deloitte &#x0026; Touche LLP"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Deloitte &#x0026; Touche LLP","institution_ids":["https://openalex.org/I145325580"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052787847","display_name":"Sachin Shetty","orcid":"https://orcid.org/0000-0002-8789-0610"},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sachin Shetty","raw_affiliation_strings":["Old Dominion University,Center for Secure &#x0026; Intelligent Critical Systems,Virginia,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Old Dominion University,Center for Secure &#x0026; Intelligent Critical Systems,Virginia,USA","institution_ids":["https://openalex.org/I81365321"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":9,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.06924653,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1241","last_page":"1246"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9886999726295471,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6713497638702393},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48894062638282776},{"id":"https://openalex.org/keywords/extraction","display_name":"Extraction (chemistry)","score":0.46171972155570984},{"id":"https://openalex.org/keywords/chemistry","display_name":"Chemistry","score":0.06474530696868896}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6713497638702393},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48894062638282776},{"id":"https://openalex.org/C4725764","wikidata":"https://www.wikidata.org/wiki/Q844704","display_name":"Extraction (chemistry)","level":2,"score":0.46171972155570984},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.06474530696868896},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iwcmc65282.2025.11059639","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iwcmc65282.2025.11059639","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Wireless Communications and Mobile Computing (IWCMC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Climate action","id":"https://metadata.un.org/sdg/13","score":0.7900000214576721}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1965555277","https://openalex.org/W2579318729","https://openalex.org/W2746600820","https://openalex.org/W2963303354","https://openalex.org/W2969695741","https://openalex.org/W2973414778","https://openalex.org/W3007318395","https://openalex.org/W3035379805","https://openalex.org/W3120847116","https://openalex.org/W3178659068","https://openalex.org/W3206880386","https://openalex.org/W4294982516","https://openalex.org/W4311923268","https://openalex.org/W4360898063","https://openalex.org/W4386280144","https://openalex.org/W4399882144","https://openalex.org/W4410341701"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Machine":[0],"Learning":[1],"as":[2],"a":[3,43,71,83,94,105,127,222],"Service":[4],"(MLaaS)":[5],"enables":[6],"users":[7],"to":[8,28,41,66,99,114],"leverage":[9],"powerful":[10],"machine":[11],"learning":[12],"models":[13],"through":[14,104,126,168],"cloud-based":[15],"APIs,":[16],"offering":[17],"scalability":[18],"and":[19,50,70,132,171,213],"ease":[20],"of":[21,129,160,177],"deployment.":[22],"However,":[23],"these":[24],"services":[25],"are":[26],"vulnerable":[27],"model":[29,101,116,179,210],"extraction":[30,102,119,188,211],"attacks,":[31],"where":[32],"adversaries":[33],"repeatedly":[34],"query":[35,122,150],"the":[36,158],"application":[37],"programming":[38],"interface":[39],"(API)":[40],"reconstruct":[42],"functionally":[44],"similar":[45],"model,":[46],"compromising":[47],"intellectual":[48],"property":[49],"security.":[51],"Despite":[52],"various":[53],"defense":[54,96],"strategies":[55],"being":[56],"proposed,":[57],"many":[58],"suffer":[59],"from":[60],"high":[61,193],"computational":[62],"costs,":[63],"limited":[64],"adaptability":[65],"evolving":[67],"attack":[68],"techniques,":[69],"reduction":[72],"in":[73],"performance":[74],"for":[75,88,226],"legitimate":[76,200],"users.":[77],"In":[78],"this":[79],"paper,":[80],"we":[81,141],"introduce":[82],"Resilient":[84],"Adaptive":[85],"Defense":[86],"Framework":[87],"Model":[89],"Extraction":[90],"Attack":[91],"Protection":[92],"(RADEP),":[93],"multifaceted":[95],"framework":[97,225],"designed":[98],"counteract":[100],"attacks":[103,212],"multi-layered":[106],"security":[107,224],"approach.":[108],"RADEP":[109,185,206],"employs":[110],"progressive":[111],"adversarial":[112,138],"training":[113],"enhance":[115],"resilience":[117],"against":[118,209,217],"attempts.":[120],"Malicious":[121],"detection":[123,194],"is":[124,166],"achieved":[125],"combination":[128],"uncertainty":[130],"quantification":[131],"behavioral":[133],"pattern":[134],"analysis,":[135],"effectively":[136,207],"identifying":[137],"queries.":[139,201],"Furthermore,":[140],"develop":[142],"an":[143],"adaptive":[144,218],"response":[145],"mechanism":[146],"that":[147,184,205],"dynamically":[148],"modifies":[149],"outputs":[151],"based":[152],"on":[153,199],"their":[154],"suspicion":[155],"scores,":[156],"reducing":[157],"utility":[159],"stolen":[161],"models.":[162,228],"Finally,":[163],"ownership":[164],"verification":[165],"enforced":[167],"embedded":[169],"watermarking":[170],"backdoor":[172],"triggers,":[173],"enabling":[174],"reliable":[175,223],"identification":[176],"unauthorized":[178],"use.":[180],"Experimental":[181],"evaluations":[182],"demonstrate":[183],"significantly":[186],"reduces":[187],"success":[189],"rates":[190],"while":[191],"maintaining":[192],"accuracy":[195],"with":[196],"minimal":[197],"impact":[198],"Extensive":[202],"experiments":[203],"show":[204],"defends":[208],"remains":[214],"resilient":[215],"even":[216],"adversaries,":[219],"making":[220],"it":[221],"MLaaS":[227]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}
