Model Stealing Through the Lens of Model Multiplicity

Eliott Baltz, Satoshi Hara, Ulrich Aïvodji

Model stealing attacks, where adversaries create high-fidelity surrogate models, are a significant threat to the intellectual property of machine learning services. Conventional wi…