Detection of model-extraction attacks on CIFAR-10 Single-client
1Detection RateFDINet
Evaluation Results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| FDINetAttack=DisGUIDE, Target Model=VGG16-BN2026.06 | 1 | 1 | 0.53 | 0.644 | 0.784 | 0.712 | 0.988 | |
| FlowGuardAttack=DisGUIDE, Target Model=VGG16-BN2026.06 | 1 | 1 | 0.17 | 0.85 | 0.919 | 0.913 | 1 | |
| FlowGuardAttack=MAZE, Target Model=VGG16-BN2026.06 | 0.965 | 0.965 | 0.17 | 0.85 | 0.904 | 0.897 | 0.921 | |
| PRADAAttack=MAZE, Target Model=VGG16-BN2026.06 | 0.84 | 0.84 | 0 | 1 | 0.913 | 0.919 | 0.92 | |
| PRADAAttack=DisGUIDE, Target Model=VGG16-BN2026.06 | 0.833 | 0.833 | 0 | 1 | 0.909 | 0.918 | 0.917 | |
| FDINetAttack=MAZE, Target Model=VGG16-BN2026.06 | 0.545 | 0.545 | 0.53 | 0.507 | 0.525 | 0.507 | 0.488 |