{"id":"https://openalex.org/W4388563019","doi":"https://doi.org/10.1109/tdsc.2022.3231271","title":"Holistic Implicit Factor Evaluation of Model Extraction Attacks","display_name":"Holistic Implicit Factor Evaluation of Model Extraction Attacks","publication_year":2023,"publication_date":"2023-11-01","ids":{"openalex":"https://openalex.org/W4388563019","doi":"https://doi.org/10.1109/tdsc.2022.3231271"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2022.3231271","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3231271","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067313044","display_name":"Anli Yan","orcid":"https://orcid.org/0000-0002-2854-2931"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Anli Yan","raw_affiliation_strings":["School of Cyberspace Security (School of Cryptology), Hainan University, Haikou, China"],"raw_orcid":"https://orcid.org/0000-0002-2854-2931","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security (School of Cryptology), Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055842190","display_name":"Hongyang Yan","orcid":"https://orcid.org/0000-0002-1493-9671"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Hongyang Yan","raw_affiliation_strings":["Department of Electronic and Information Engineering, Hong Kong Polytechnic Unviersity, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0002-1493-9671","affiliations":[{"raw_affiliation_string":"Department of Electronic and Information Engineering, Hong Kong Polytechnic Unviersity, Hong Kong","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009120288","display_name":"Li Hu","orcid":"https://orcid.org/0000-0003-1453-0996"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Li Hu","raw_affiliation_strings":["School of Cyberspace Security (School of Cryptology), Hainan University, Haikou, China"],"raw_orcid":"https://orcid.org/0000-0003-1453-0996","affiliations":[{"raw_affiliation_string":"School of Cyberspace Security (School of Cryptology), Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039994407","display_name":"Xiaozhang Liu","orcid":"https://orcid.org/0000-0001-9858-0063"},"institutions":[{"id":"https://openalex.org/I20942203","display_name":"Hainan University","ror":"https://ror.org/03q648j11","country_code":"CN","type":"education","lineage":["https://openalex.org/I20942203"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaozhang Liu","raw_affiliation_strings":["School of Computer Science and Technology, Hainan University, Haikou, China"],"raw_orcid":"https://orcid.org/0000-0001-9858-0063","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Hainan University, Haikou, China","institution_ids":["https://openalex.org/I20942203"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010660404","display_name":"Teng Huang","orcid":"https://orcid.org/0000-0001-7261-6398"},"institutions":[{"id":"https://openalex.org/I82880672","display_name":"Beihang University","ror":"https://ror.org/00wk2mp56","country_code":"CN","type":"education","lineage":["https://openalex.org/I82880672"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Teng Huang","raw_affiliation_strings":["School of Computer Science and Engineering, Beihang University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7261-6398","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Beihang University, Beijing, China","institution_ids":["https://openalex.org/I82880672"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.269,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.833988,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"20","issue":"6","first_page":"4678","last_page":"4689"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.970300018787384,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10751","display_name":"Forensic and Genetic Research","score":0.91839998960495,"subfield":{"id":"https://openalex.org/subfields/1311","display_name":"Genetics"},"field":{"id":"https://openalex.org/fields/13","display_name":"Biochemistry, Genetics and Molecular Biology"},"domain":{"id":"https://openalex.org/domains/1","display_name":"Life Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8764584064483643},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8445594310760498},{"id":"https://openalex.org/keywords/replicate","display_name":"Replicate","score":0.625673770904541},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.547855794429779},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5461070537567139},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5366093516349792},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4836522340774536},{"id":"https://openalex.org/keywords/surrogate-model","display_name":"Surrogate model","score":0.42800459265708923},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4017263352870941}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8764584064483643},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8445594310760498},{"id":"https://openalex.org/C2781162219","wikidata":"https://www.wikidata.org/wiki/Q26250693","display_name":"Replicate","level":2,"score":0.625673770904541},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.547855794429779},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5461070537567139},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5366093516349792},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4836522340774536},{"id":"https://openalex.org/C131675550","wikidata":"https://www.wikidata.org/wiki/Q7646884","display_name":"Surrogate model","level":2,"score":0.42800459265708923},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4017263352870941},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2022.3231271","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3231271","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5899999737739563,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G1126671563","display_name":null,"funder_award_id":"62102107","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4591754692","display_name":"\u6838\u65b9\u6cd5\u7684\u5b89\u5168\u6027\u95ee\u9898\u53ca\u5176\u9632\u5fa1\u673a\u5236\u7814\u7a76","funder_award_id":"61966011","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6661233005","display_name":null,"funder_award_id":"62002074","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W2603766943","https://openalex.org/W2750384547","https://openalex.org/W2805104469","https://openalex.org/W2808195004","https://openalex.org/W2895073576","https://openalex.org/W2895317832","https://openalex.org/W2944977718","https://openalex.org/W2952608669","https://openalex.org/W2963303354","https://openalex.org/W2963560987","https://openalex.org/W2969695741","https://openalex.org/W2972997402","https://openalex.org/W2997146418","https://openalex.org/W3007318395","https://openalex.org/W3035379805","https://openalex.org/W3081488247","https://openalex.org/W3087685156","https://openalex.org/W3103932910","https://openalex.org/W3113058464","https://openalex.org/W3118608800","https://openalex.org/W3123173628","https://openalex.org/W3135569543","https://openalex.org/W3139434763","https://openalex.org/W3174136778","https://openalex.org/W3178659068","https://openalex.org/W3197312262","https://openalex.org/W3216556018","https://openalex.org/W4200633448","https://openalex.org/W4293846201","https://openalex.org/W6743688258","https://openalex.org/W6751912496","https://openalex.org/W6753937820","https://openalex.org/W6755424845","https://openalex.org/W6762685017","https://openalex.org/W6766787143","https://openalex.org/W6770411749","https://openalex.org/W6772101090","https://openalex.org/W6772109348","https://openalex.org/W6774150056","https://openalex.org/W6775078712","https://openalex.org/W6777991474","https://openalex.org/W6780010867","https://openalex.org/W6784730007","https://openalex.org/W6787972765","https://openalex.org/W6790889838","https://openalex.org/W6794487020","https://openalex.org/W6799556662"],"related_works":["https://openalex.org/W4254851101","https://openalex.org/W3171007296","https://openalex.org/W22115721","https://openalex.org/W2211931904","https://openalex.org/W2321234655","https://openalex.org/W2065444835","https://openalex.org/W2470062578","https://openalex.org/W2502115930","https://openalex.org/W2952773340","https://openalex.org/W2981861370"],"abstract_inverted_index":{"Model":[0],"extraction":[1,54,95,196],"attacks":[2,20,55,65],"(MEAs)":[3],"allow":[4],"adversaries":[5],"to":[6,12,33,44,59,88,194],"replicate":[7],"a":[8,77,103],"surrogate":[9,157],"model":[10,136,143,153,158,170,187,195],"analogous":[11],"the":[13,27,61,67,90,115,130,133,141,149,152,156,182,185],"target":[14,142,186],"model's":[15],"decision":[16],"pattern.":[17],"While":[18],"several":[19],"and":[21,66,74,138,172],"defenses":[22],"have":[23],"been":[24],"studied":[25],"in-depth,":[26],"underlying":[28],"reasons":[29],"behind":[30],"our":[31,177],"susceptibility":[32],"them":[34],"often":[35],"remain":[36],"unclear.":[37],"Analyzing":[38],"these":[39],"implication":[40,108],"influence":[41],"factors":[42,109],"helps":[43],"promote":[45],"secure":[46],"deep":[47],"learning":[48],"(DL)":[49],"systems,":[50],"it":[51,86],"requires":[52,80],"studying":[53],"in":[56],"various":[57],"scenarios":[58],"determine":[60],"success":[62],"of":[63,69,93,107,132,140,151,155,184],"different":[64],"hallmarks":[68],"DLs.":[70],"However,":[71],"understanding,":[72],"implementing,":[73],"evaluating":[75],"even":[76],"single":[78],"attack":[79,96,116],"extremely":[81],"high":[82],"technical":[83],"effort,":[84],"making":[85],"impractical":[87],"study":[89,167,178],"vast":[91],"number":[92],"unique":[94],"scenarios.":[97],"To":[98],"this":[99],"end,":[100],"we":[101,123,128],"present":[102],"first-of-its-kind":[104],"holistic":[105],"evaluation":[106,163],"for":[110],"MEAs":[111],"which":[112],"relies":[113],"on":[114,125,144,159],"process":[117],"abstracted":[118],"from":[119],"state-of-the-art":[120],"MEAs.":[121,160],"Specifically,":[122],"concentrate":[124],"four":[126,173],"perspectives.":[127],"consider":[129],"impact":[131,150],"task":[134],"accuracy,":[135],"architecture,":[137],"robustness":[139,183],"MEAs,":[145],"as":[146,148],"well":[147],"architecture":[154],"Our":[161],"empirical":[162],"includes":[164],"an":[165],"ablation":[166],"over":[168],"sixteen":[169],"architectures":[171],"image":[174],"datasets.":[175],"Surprisingly,":[176],"shows":[179],"that":[180],"improving":[181],"via":[188],"adversarial":[189],"training":[190],"is":[191],"more":[192],"vulnerable":[193],"attacks.":[197]},"counts_by_year":[{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}