The Limits of Query Monitoring against Distributed Model Extraction

Snigdha Chandan Khilar

Model providers now face distillation campaigns run through thousands of accounts, each of which looks like an ordinary user. When network and payment metadata cannot link those ac…