Tianqi Wen

An extraction attack on image recognition model using VAE-kdtree model

2021

This paper proposes a black box extraction attack model on pre-trained image classifiers to rebuild a functionally equivalent model with high similarity. Common model extraction attacks use a large number of training samples to feed …