ADS-C: Antidistillation Sampling for Classification

Khawaja Abaid Ullah, Mohammad Javad Khojasteh

Knowledge distillation enables an adversary to replicate a proprietary classifier by querying its prediction interface and training a surrogate on the returned probability vectors.…