Model Extraction on Letter-low
89.2FidelityShadow
Evaluation results
| Method | Links | ||
|---|---|---|---|
| ShadowExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 89.2 | 89 | |
| Non-boundaryExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 89.2 | 89 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 89.2 | 89 | |
| EGSteal-BBExplainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 88.7 | 88.5 | |
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 88.5 | 88.3 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 86.2 | 85.8 | |
| Hybrid (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 86 | 86.4 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 85.8 | 85.5 | |
| EGSteal-BBExplainer=PGExp, Victim Model Architecture=GAT2026.05 | 84 | 83.8 | |
| EGSteal-BBExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 82.9 | 82.6 | |
| Boundary (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 81.7 | 81.4 | |
| Hybrid (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 81.7 | 81.7 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 81.6 | 81.6 | |
| ShadowExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 78.3 | 77.6 | |
| Boundary (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 73.6 | 72.9 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 72.3 | 72.3 | |
| Non-boundaryExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 71.7 | 71.2 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 69.9 | 71.6 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 69.4 | 69.1 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Model=GCN2026.05 | 68.9 | 68.4 | |
| Shadow-OnlyExplainer=GNNExplainer, Victim Model=GCN2026.05 | 68.6 | 69.6 | |
| Shadow-OnlyExplainer=PGExplainer, Victim Model=GCN2026.05 | 66.4 | 66.9 | |
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 63 | 65.7 | |
| Non-boundaryExplainer=GNNExplainer, Victim Model=GCN2026.05 | 44.4 | 43 |