{"id":"https://openalex.org/W4405183109","doi":"https://doi.org/10.1145/3658644.3670267","title":"Beowulf: Mitigating Model Extraction Attacks Via Reshaping Decision Regions","display_name":"Beowulf: Mitigating Model Extraction Attacks Via Reshaping Decision Regions","publication_year":2024,"publication_date":"2024-12-02","ids":{"openalex":"https://openalex.org/W4405183109","doi":"https://doi.org/10.1145/3658644.3670267"},"language":"en","primary_location":{"id":"doi:10.1145/3658644.3670267","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670267","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670267","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670267","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046712504","display_name":"Xueluan Gong","orcid":"https://orcid.org/0000-0003-2190-8117"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xueluan Gong","raw_affiliation_strings":["School of Computer Science, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-2190-8117","affiliations":[{"raw_affiliation_string":"School of Computer Science, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075093191","display_name":"Rubin Wei","orcid":null},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rubin Wei","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0003-7998-7273","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054424294","display_name":"Ziyao Wang","orcid":"https://orcid.org/0000-0002-1394-9587"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziyao Wang","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-1394-9587","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101239964","display_name":"Yuchen Sun","orcid":null},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuchen Sun","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0001-8528-4510","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jiawen Peng","orcid":"https://orcid.org/0009-0008-9110-8338"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiawen Peng","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0008-9110-8338","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015275781","display_name":"Yanjiao Chen","orcid":"https://orcid.org/0000-0002-1382-0679"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanjiao Chen","raw_affiliation_strings":["College of Electrical Engineering, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-1382-0679","affiliations":[{"raw_affiliation_string":"College of Electrical Engineering, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100391116","display_name":"Qian Wang","orcid":"https://orcid.org/0000-0002-8967-8525"},"institutions":[{"id":"https://openalex.org/I37461747","display_name":"Wuhan University","ror":"https://ror.org/033vjfk17","country_code":"CN","type":"education","lineage":["https://openalex.org/I37461747"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qian Wang","raw_affiliation_strings":["School of Cyber Science and Engineering, Wuhan University, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-8967-8525","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Wuhan University, Wuhan, China","institution_ids":["https://openalex.org/I37461747"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3838","last_page":"3852"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9848999977111816,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9767000079154968,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6316919326782227},{"id":"https://openalex.org/keywords/extraction","display_name":"Extraction (chemistry)","score":0.6165781021118164},{"id":"https://openalex.org/keywords/decision-model","display_name":"Decision model","score":0.4668239951133728},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.13820326328277588}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6316919326782227},{"id":"https://openalex.org/C4725764","wikidata":"https://www.wikidata.org/wiki/Q844704","display_name":"Extraction (chemistry)","level":2,"score":0.6165781021118164},{"id":"https://openalex.org/C59594135","wikidata":"https://www.wikidata.org/wiki/Q5249242","display_name":"Decision model","level":2,"score":0.4668239951133728},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.13820326328277588},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3658644.3670267","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670267","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670267","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3658644.3670267","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3658644.3670267","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3658644.3670267","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.4300000071525574,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G2404993877","display_name":null,"funder_award_id":"U20B2049","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6034313629","display_name":null,"funder_award_id":"U21B2018","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4405183109.pdf","grobid_xml":"https://content.openalex.org/works/W4405183109.grobid-xml"},"referenced_works_count":48,"referenced_works":["https://openalex.org/W1575192016","https://openalex.org/W1873763122","https://openalex.org/W1997452128","https://openalex.org/W2033178790","https://openalex.org/W2108598243","https://openalex.org/W2117876524","https://openalex.org/W2145803112","https://openalex.org/W2253444830","https://openalex.org/W2294710185","https://openalex.org/W2350778671","https://openalex.org/W2586816396","https://openalex.org/W2603766943","https://openalex.org/W2734358244","https://openalex.org/W2794002979","https://openalex.org/W2808195004","https://openalex.org/W2894608918","https://openalex.org/W2943925420","https://openalex.org/W2963303354","https://openalex.org/W2963857521","https://openalex.org/W2969695741","https://openalex.org/W2972997402","https://openalex.org/W2992308087","https://openalex.org/W2997146418","https://openalex.org/W3007318395","https://openalex.org/W3035379805","https://openalex.org/W3085753079","https://openalex.org/W3092527263","https://openalex.org/W3096831136","https://openalex.org/W3103932910","https://openalex.org/W3119841746","https://openalex.org/W3141043040","https://openalex.org/W3151056240","https://openalex.org/W3174136778","https://openalex.org/W3178659068","https://openalex.org/W3185321995","https://openalex.org/W3190229640","https://openalex.org/W3206285027","https://openalex.org/W3206880386","https://openalex.org/W4212774754","https://openalex.org/W4233210494","https://openalex.org/W4288057770","https://openalex.org/W4312343407","https://openalex.org/W4312809370","https://openalex.org/W4323059284","https://openalex.org/W4360898063","https://openalex.org/W4385080307","https://openalex.org/W4388858191","https://openalex.org/W6784323503"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Machine":[0],"Learning":[1],"as":[2],"a":[3,14,22,68,113,193],"Service":[4],"(MLaaS)":[5],"enables":[6],"resource-constrained":[7],"users":[8,38],"to":[9,59,93,153,158],"access":[10],"well-trained":[11],"models":[12,42,84],"through":[13],"publicly":[15],"accessible":[16],"Application":[17],"Programming":[18],"Interface":[19],"(API)":[20],"on":[21,44,169],"pay-per-query":[23],"basis.Nevertheless,":[24],"model":[25,33,49,70,149],"owners":[26],"may":[27,102],"face":[28],"the":[29,104,108,127,130,134,148,161,165,203],"potential":[30],"threats":[31],"of":[32,107,129],"extraction":[34,50,71],"attacks":[35],"where":[36],"malicious":[37],"replicate":[39],"valuable":[40],"commercial":[41],"based":[43],"query":[45],"results.Existing":[46],"defenses":[47],"against":[48,205],"attacks,":[51],"however,":[52],"either":[53],"sacrifice":[54],"prediction":[55],"accuracy":[56],"or":[57],"fail":[58],"thwart":[60],"more":[61],"advanced":[62],"attacks.In":[63],"this":[64],"paper,":[65],"we":[66,111,151],"propose":[67,152],"novel":[69],"defense,":[72],"dubbed":[73],"Beowulf":[74],"1":[75,185],",":[76],"which":[77,101],"draws":[78],"inspiration":[79],"from":[80],"theoretical":[81],"findings":[82],"that":[83],"with":[85,143],"complex":[86],"and":[87,121,133,164,173,179,189,200],"narrow":[88],"decision":[89,99,138,141],"regions":[90,139],"are":[91,182],"difficult":[92],"be":[94],"reproduced.Rather":[95],"than":[96],"arbitrarily":[97],"altering":[98],"regions,":[100],"jeopardize":[103],"predictive":[105],"capacity":[106],"victim":[109],"model,":[110],"introduce":[112],"dummy":[114,131,162],"class,":[115,132],"carefully":[116],"synthesized":[117],"using":[118],"both":[119],"random":[120,124],"adversarial":[122,135],"noises.The":[123],"noise":[125,136],"broadens":[126],"coverage":[128],"impacts":[137],"near":[140],"boundaries":[142],"normal":[144,166],"classes.To":[145],"further":[146],"improve":[147],"utility,":[150],"employ":[154],"data":[155],"augmentation":[156],"methods":[157],"seamlessly":[159],"integrate":[160],"class":[163],"classes.Extensive":[167],"evaluations":[168],"CIFAR-10,":[170],"GTSRB,":[171],"CIFAR-100,":[172],"ImageNette":[174],"datasets":[175],"*":[176],"Yanjiao":[177],"Chen":[178],"Qian":[180],"Wang":[181],"corresponding":[183],"authors.":[184],"In":[186],"Anglo-Saxon":[187],"literature":[188],"mythology,":[190],"\"Beowulf\"":[191],"is":[192],"heroic":[194],"figure":[195],"known":[196],"for":[197],"his":[198],"strength":[199],"bravery,":[201],"defending":[202],"kingdom":[204],"monsters":[206],"in":[207],"an":[208],"epic":[209],"tale.":[210]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}