Model Extraction on MUTAG
100FidelityBoundary (XSTEAL)
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 100 | 77.3 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 100 | 77.3 | |
| ShadowExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 100 | 80 | |
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 100 | 80 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 100 | 80 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 100 | 80 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 100 | 80 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 97 | 74.2 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 95.5 | 72.7 | |
| Boundary (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 95.5 | 72.7 | |
| Boundary (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 95.5 | 72.7 | |
| Hybrid (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 95.5 | 72.7 | |
| Hybrid (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 95.5 | 72.7 | |
| EGSteal-BBExplainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 95 | 75 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Model=GCN2026.05 | 90.9 | 68.2 | |
| Shadow-OnlyExplainer=PGExplainer, Victim Model=GCN2026.05 | 90.9 | 68.2 | |
| EGSteal-BBExplainer=PGExp, Victim Model Architecture=GAT2026.05 | 90.9 | 68.2 | |
| Non-boundaryExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 86.4 | 63.6 | |
| EGSteal-BBExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 86.4 | 72.7 | |
| Non-boundaryExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 85 | 65 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 85 | 75 | |
| Non-boundaryExplainer=GNNExplainer, Victim Model=GCN2026.05 | 84.8 | 65.2 | |
| Shadow-OnlyExplainer=GNNExplainer, Victim Model=GCN2026.05 | 81.8 | 68.2 | |
| ShadowExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 81.8 | 68.2 |