Model Extraction on MNIST
55.1FidelityHybrid (XSTEAL)
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 55.1 | 26.6 | |
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 54.9 | 26.2 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Model=GCN2026.05 | 53.8 | 26.5 | |
| Shadow-OnlyExplainer=GNNExplainer, Victim Model=GCN2026.05 | 53.4 | 26.4 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 53.1 | 25.9 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 52 | 25.7 | |
| Shadow-OnlyExplainer=PGExplainer, Victim Model=GCN2026.05 | 50.2 | 25.1 | |
| Non-boundaryExplainer=GNNExplainer, Victim Model=GCN2026.05 | 48.3 | 24.4 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 39.5 | 28.7 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 37.6 | 26.6 | |
| Hybrid (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 37.2 | 30.7 | |
| Non-boundaryExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 36.1 | 29.4 | |
| EGSteal-BBExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 35.9 | 28.9 | |
| EGSteal-BBExplainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 35.9 | 25.8 | |
| ShadowExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 35.6 | 26.2 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 35.2 | 26.3 | |
| Non-boundaryExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 35 | 24.3 | |
| ShadowExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 33.6 | 27.6 | |
| Hybrid (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 33.4 | 27.4 | |
| EGSteal-BBExplainer=PGExp, Victim Model Architecture=GAT2026.05 | 31.6 | 26.4 | |
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 30.9 | 21 | |
| Boundary (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 28.9 | 24.8 | |
| Boundary (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 28.5 | 24.5 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 28.4 | 19.4 |