Model Extraction on AIDS
91.1FidelityBoundary (XSTEAL)
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 91.1 | 75.9 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 90.5 | 79.8 | |
| Boundary (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 89.8 | 75.6 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 88.8 | 74.1 | |
| ShadowExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 88.7 | 75.6 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 88.7 | 80.4 | |
| Boundary (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 88.6 | 77.8 | |
| ShadowExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 86.9 | 76.1 | |
| Hybrid (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 86.9 | 72.7 | |
| Shadow-OnlyExplainer=GNNExplainer, Victim Model=GCN2026.05 | 86.8 | 72.1 | |
| Hybrid (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 85.8 | 75 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 85.1 | 71 | |
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 84.5 | 75 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 83.9 | 76.8 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 83.6 | 70.7 | |
| Non-boundaryExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 72 | 74.4 | |
| EGSteal-BBExplainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 72 | 67.3 | |
| Non-boundaryExplainer=GNNExplainer, Victim Model=GCN2026.05 | 71.3 | 66.4 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 70.2 | 65.5 | |
| Shadow-OnlyExplainer=PGExplainer, Victim Model=GCN2026.05 | 68.4 | 70.4 | |
| Non-boundaryExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 68.2 | 72.2 | |
| EGSteal-BBExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 67 | 61.9 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Model=GCN2026.05 | 65.8 | 67.2 | |
| EGSteal-BBExplainer=PGExp, Victim Model Architecture=GAT2026.05 | 64.2 | 62.5 |