{"id":"https://openalex.org/W4293093392","doi":"https://doi.org/10.1109/pst55820.2022.9851981","title":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","display_name":"Careful What You Wish For: on the Extraction of Adversarially Trained Models","publication_year":2022,"publication_date":"2022-08-22","ids":{"openalex":"https://openalex.org/W4293093392","doi":"https://doi.org/10.1109/pst55820.2022.9851981"},"language":"en","primary_location":{"id":"doi:10.1109/pst55820.2022.9851981","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst55820.2022.9851981","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 19th Annual International Conference on Privacy, Security & Trust (PST)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082609776","display_name":"Kacem Khaled","orcid":null},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Kacem Khaled","raw_affiliation_strings":["Polytechnique Montréal,Département GIGL,Montreal,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Polytechnique Montréal,Département GIGL,Montreal,Canada","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022527556","display_name":"Gabriela Nicolescu","orcid":"https://orcid.org/0000-0002-5205-9931"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Gabriela Nicolescu","raw_affiliation_strings":["Polytechnique Montréal,Département GIGL,Montreal,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Polytechnique Montréal,Département GIGL,Montreal,Canada","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055509031","display_name":"Felipe G\u00f6hring de Magalh\u00e3es","orcid":"https://orcid.org/0000-0002-0766-1421"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Felipe Gohring De Magalhaes","raw_affiliation_strings":["Polytechnique Montréal,Département GIGL,Montreal,Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Polytechnique Montréal,Département GIGL,Montreal,Canada","institution_ids":["https://openalex.org/I45683168"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I45683168"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9370999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.9016000032424927,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8353533148765564},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7495090961456299},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6833721995353699},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6454403400421143},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5972270965576172},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5592698454856873},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.44909390807151794},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.4325335919857025},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.41219669580459595},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3196564316749573}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8353533148765564},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7495090961456299},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6833721995353699},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6454403400421143},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5972270965576172},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5592698454856873},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.44909390807151794},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.4325335919857025},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.41219669580459595},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3196564316749573},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/pst55820.2022.9851981","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst55820.2022.9851981","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 19th Annual International Conference on Privacy, Security & Trust (PST)","raw_type":"proceedings-article"},{"id":"pmh:oai:publications.polymtl.ca:51290","is_oa":false,"landing_page_url":"https://publications.polymtl.ca/51290/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Communication de conf\u00e9rence"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.8299999833106995,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320309545","display_name":"Synopsys","ror":"https://ror.org/013by2m91"},{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":87,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W1673923490","https://openalex.org/W1686810756","https://openalex.org/W1945616565","https://openalex.org/W1999192586","https://openalex.org/W2007562169","https://openalex.org/W2108598243","https://openalex.org/W2112507308","https://openalex.org/W2112796928","https://openalex.org/W2117539524","https://openalex.org/W2145287260","https://openalex.org/W2151298633","https://openalex.org/W2162552722","https://openalex.org/W2180612164","https://openalex.org/W2194775991","https://openalex.org/W2296452361","https://openalex.org/W2335728318","https://openalex.org/W2461943168","https://openalex.org/W2535690855","https://openalex.org/W2603766943","https://openalex.org/W2618530766","https://openalex.org/W2623293810","https://openalex.org/W2798302089","https://openalex.org/W2808195004","https://openalex.org/W2895073576","https://openalex.org/W2896457183","https://openalex.org/W2904814116","https://openalex.org/W2914982603","https://openalex.org/W2946363484","https://openalex.org/W2947527202","https://openalex.org/W2962763344","https://openalex.org/W2963303354","https://openalex.org/W2963465081","https://openalex.org/W2963542245","https://openalex.org/W2963809228","https://openalex.org/W2963834268","https://openalex.org/W2964082701","https://openalex.org/W2969695741","https://openalex.org/W2981828710","https://openalex.org/W2984103614","https://openalex.org/W2997146418","https://openalex.org/W3008983606","https://openalex.org/W3035379805","https://openalex.org/W3049152512","https://openalex.org/W3082305010","https://openalex.org/W3087685156","https://openalex.org/W3102836279","https://openalex.org/W3103836116","https://openalex.org/W3103932910","https://openalex.org/W3104224589","https://openalex.org/W3118608800","https://openalex.org/W3119373805","https://openalex.org/W3159603021","https://openalex.org/W3163781913","https://openalex.org/W3168455774","https://openalex.org/W3174136778","https://openalex.org/W3178659068","https://openalex.org/W4285762936","https://openalex.org/W4288083516","https://openalex.org/W4289146347","https://openalex.org/W4293846201","https://openalex.org/W4298167384","https://openalex.org/W4394644156","https://openalex.org/W6637162671","https://openalex.org/W6637373629","https://openalex.org/W6640425456","https://openalex.org/W6676935882","https://openalex.org/W6684011098","https://openalex.org/W6684559340","https://openalex.org/W6703116779","https://openalex.org/W6739868092","https://openalex.org/W6752307889","https://openalex.org/W6753937820","https://openalex.org/W6755207826","https://openalex.org/W6755424845","https://openalex.org/W6757572683","https://openalex.org/W6763527923","https://openalex.org/W6766787143","https://openalex.org/W6770088130","https://openalex.org/W6772101090","https://openalex.org/W6774150056","https://openalex.org/W6775078712","https://openalex.org/W6777822952","https://openalex.org/W6783732136","https://openalex.org/W6785592177","https://openalex.org/W6787972765","https://openalex.org/W6864546407"],"related_works":["https://openalex.org/W4320018150","https://openalex.org/W2040808657","https://openalex.org/W4239582170","https://openalex.org/W3048732067","https://openalex.org/W2918664383","https://openalex.org/W106056076","https://openalex.org/W4320855730","https://openalex.org/W2135200719","https://openalex.org/W4383468834","https://openalex.org/W4387796593"],"abstract_inverted_index":{"Recent":[0],"attacks":[1,10,19,105,120,145,184],"on":[2,118,146],"Machine":[3],"Learning":[4],"(ML)":[5],"models":[6,15,35,149,178,186,232],"such":[7,166],"as":[8],"evasion":[9],"with":[11,150,202],"adversarial":[12,31,37,216,238],"examples":[13,38,239],"and":[14,23,47,60,91,95,200],"stealing":[16],"through":[17,221],"extraction":[18,119,144,183,222],"pose":[20],"several":[21],"security":[22,133],"privacy":[24,69],"threats.":[25],"Prior":[26],"work":[27,117,160],"proposes":[28],"to":[29,33,81,142,164,182,196,237,241],"use":[30],"training":[32,130,190],"secure":[34],"from":[36,230,244],"that":[39,175,214],"can":[40,88,193],"evade":[41],"the":[42,56,82,107,111,126,129,154,162,209,215],"classification":[43],"of":[44,85,110,156,208],"a":[45,73,78,86,93,101,140,203],"model":[46,68,87],"deteriorate":[48],"its":[49,61],"performance.":[50],"However,":[51],"this":[52,136],"protection":[53],"technique":[54],"affects":[55],"model\u2019s":[57],"decision":[58],"boundary":[59],"prediction":[62,83,108],"probabilities,":[63],"hence":[64],"it":[65,90],"might":[66],"raise":[67],"risks.":[70],"In":[71,135],"fact,":[72],"malicious":[74],"user":[75],"using":[76],"only":[77],"query":[79],"access":[80],"output":[84],"extract":[89],"obtain":[92],"high-accuracy":[94],"high-fidelity":[96],"surrogate":[97],"model.":[98,113],"To":[99,153],"have":[100],"greater":[102],"extraction,":[103],"these":[104],"leverage":[106],"probabilities":[109],"victim":[112],"Indeed,":[114],"all":[115],"previous":[116],"do":[121],"not":[122],"take":[123],"into":[124],"consideration":[125],"changes":[127],"in":[128],"process":[131],"for":[132],"purposes.":[134],"paper,":[137],"we":[138,173],"propose":[139],"framework":[141],"assess":[143],"adversarially":[147,176],"trained":[148,177,246],"vision":[151],"datasets.":[152],"best":[155],"our":[157,159],"knowledge,":[158],"is":[161,219],"first":[163],"perform":[165],"evaluation.":[167],"Through":[168],"an":[169,234],"extensive":[170],"empirical":[171],"study,":[172],"demonstrate":[174],"are":[179],"more":[180],"vulnerable":[181],"than":[185,206],"obtained":[187],"under":[188],"natural":[189],"circumstances.":[191],"They":[192],"achieve":[194],"up":[195],"\u00d71.2":[197],"higher":[198],"accuracy":[199,236],"agreement":[201],"fraction":[204],"lower":[205],"\u00d70.75":[207],"queries.":[210],"We":[211],"additionally":[212],"find":[213],"robustness":[217],"capability":[218],"transferable":[220],"attacks,":[223],"i.e.,":[224],"extracted":[225,242],"Deep":[226],"Neural":[227],"Networks":[228],"(DNNs)":[229],"robust":[231],"show":[233],"enhanced":[235],"compared":[240],"DNNs":[243],"naturally":[245],"(i.e.":[247],"standard)":[248],"models.":[249]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2022-08-26T00:00:00"}