Knockoff Nets: Stealing Functionality of Black-Box Models

Functionality stealing from query access alone, with no knowledge of training data, model internals or output semantics. Vision results, but the threat model - black-box query access is sufficient - is what transfers to a served LLM.

paper

2018-12-06

2026-10-04