Model Extraction on NCI1
96FidelityBoundary (XSTEAL)
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 96 | 66.3 | |
| Boundary (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 95.5 | 69 | |
| Hybrid (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 95.5 | 69 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 95.2 | 66.5 | |
| ShadowExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 95 | 68 | |
| Shadow-OnlyExplainer=GNNExplainer, Victim Model=GCN2026.05 | 94.3 | 66.3 | |
| Hybrid (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 93.5 | 68.8 | |
| Boundary (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 93.2 | 68.3 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 92.6 | 65.9 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 92.2 | 65.9 | |
| Non-boundaryExplainer=GNNExplainer, Victim Model=GCN2026.05 | 91.4 | 65.7 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 91.4 | 72.1 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 91 | 71.4 | |
| Non-boundaryExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 90.8 | 67.7 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 90.4 | 72 | |
| ShadowExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 90.2 | 72.1 | |
| Non-boundaryExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 89.2 | 71.4 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Model=GCN2026.05 | 88.9 | 65.4 | |
| EGSteal-BBExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 87.2 | 66.5 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 86.2 | 69.8 | |
| Shadow-OnlyExplainer=PGExplainer, Victim Model=GCN2026.05 | 84.8 | 63.5 | |
| EGSteal-BBExplainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 84.5 | 67 | |
| EGSteal-BBExplainer=PGExp, Victim Model Architecture=GAT2026.05 | 79.5 | 64 | |
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 77.6 | 63.2 |