2023
Marich: A Query-efficient Distributionally Equivalent Model Extraction Attack
NeurIPS 2023poster
We study design of black-box model extraction attacks that can *send minimal number of queries from* a *publicly available dataset* to a target ML model through a predictive API with an aim *to create an informative and distributionally equivalent replica* of the target. First, we define *distributi…