Model Extraction on PTC FM
93.3FidelityBoundary (XSTEAL)
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 93.3 | 53.3 | |
| Hybrid (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 92.9 | 64.3 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 90.5 | 58.3 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 90 | 56.7 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 86.7 | 53.3 | |
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 85.7 | 53.6 | |
| ShadowExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 85.7 | 57.1 | |
| Hybrid (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 85.7 | 57.1 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 84.5 | 52.4 | |
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 83.3 | 50 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 82.1 | 50 | |
| Shadow-OnlyExplainer=GNNExplainer, Victim Model=GCN2026.05 | 77.4 | 54.8 | |
| Non-boundaryExplainer=GNNExplainer, Victim Model=GCN2026.05 | 75 | 50 | |
| ShadowExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 73.3 | 60 | |
| Boundary (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 71.4 | 42.9 | |
| Non-boundaryExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 64.3 | 50 | |
| EGSteal-BBExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 64.3 | 35.7 | |
| Boundary (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 64.3 | 35.7 | |
| Non-boundaryExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 63.3 | 63.3 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Model=GCN2026.05 | 59.5 | 44.1 | |
| Shadow-OnlyExplainer=PGExplainer, Victim Model=GCN2026.05 | 59.5 | 44.1 | |
| EGSteal-BBExplainer=PGExp, Victim Model Architecture=GAT2026.05 | 57.1 | 28.6 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 53.3 | 46.7 | |
| EGSteal-BBExplainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 53.3 | 46.7 |