Daily Arxiv

This is a page that curates AI-related papers published worldwide.
All content here is summarized using Google Gemini and operated on a non-profit basis.
Copyright for each paper belongs to the authors and their institutions; please make sure to credit the source when sharing.

A Systematic Survey of Model Extraction Attacks and Defenses: State-of-the-Art and Perspectives

Created by
  • Haebom

Author

Kaixiang Zhao, Lincan Li, Kaize Ding, Neil Zhenqiang Gong, Yue Zhao, Yushun Dong

Outline

This paper provides a comprehensive survey of model extraction attacks (MEAs) arising from the proliferation of machine learning-as-a-service (MLaaS) platforms. While MLaaS platforms have increased accessibility to advanced ML models through user-friendly APIs, they have also increased the risk of MEAs, which replicate model functionality. This paper presents a taxonomy of MEAs, analyzes various attack techniques and defense strategies, and highlights the limitations of existing defenses and the tradeoffs between model utility and security. Furthermore, we evaluate MEAs in various computing environments and discuss their technical, ethical, legal, and social implications, as well as future research directions. Finally, we provide an online repository of continuously updated related literature.

Takeaways, Limitations

Takeaways:
Clearly presents the security vulnerabilities of MLaaS platforms and the severity of MEA.
It provides useful information to researchers by presenting a systematic classification system for MEAs and various attack and defense strategies.
It provides important insights needed to find the balance between model usefulness and security.
It presents a multifaceted perspective by discussing the technical, ethical, legal, and social implications of MEAs.
We support research activities by providing an online repository that continuously updates relevant research literature.
Limitations:
The need for continuous monitoring and response strategies to the emergence of new MEA techniques.
Finding the optimal balance between model usability and security remains an ongoing research challenge.
Further research is needed to generalize and standardize MEA defense strategies in various computing environments.
Further validation is needed to ensure that the proposed classification scheme fully encompasses all MEA types.
👍