Model Extraction on Randomly generated models Layer 2
13.17Extraction Time (Signature)Optimized Sign Extraction
Evaluation results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| Optimized Sign ExtractionModel architecture=20-10x2-1, Parameters=1102024.06 | 13.17 | 0.12 | 1,325 | 666 | 113 | |
| CarliniModel architecture=20-10x2-1, Parameters=1102024.06 | 13.38 | 86.38 | — | — | — | |
| Canales-MartinezModel architecture=20-10x2-1, Parameters=1102024.06 | 13.38 | 1.59 | — | — | — | |
| CarliniModel architecture=10-5x2-1, Parameters=302024.06 | 18.08 | 76.39 | — | — | — | |
| Canales-MartinezModel architecture=10-5x2-1, Parameters=302024.06 | 18.08 | 0.82 | — | — | — | |
| Optimized Sign ExtractionModel architecture=10-5x2-1, Parameters=302024.06 | 18.65 | 0.05 | 1,640 | 500 | 101 | |
| Optimized Sign ExtractionModel architecture=30-15x2-1, Parameters=2402024.06 | 22.39 | 0.16 | 1,481 | 652 | 112 | |
| CarliniModel architecture=30-15x2-1, Parameters=2402024.06 | 22.81 | 141.24 | — | — | — | |
| Canales-MartinezModel architecture=30-15x2-1, Parameters=2402024.06 | 22.81 | 2.37 | — | — | — | |
| CarliniModel architecture=40-20x2-1, Parameters=4202024.06 | 27.59 | 193.52 | — | — | — | |
| Canales-MartinezModel architecture=40-20x2-1, Parameters=4202024.06 | 27.59 | 3.46 | — | — | — | |
| Optimized Sign ExtractionModel architecture=40-20x2-1, Parameters=4202024.06 | 27.96 | 0.28 | 1,236 | 712 | 110 | |
| CarliniModel architecture=50-25x2-1, Parameters=6502024.06 | 29.34 | — | — | — | — | |
| Canales-MartinezModel architecture=50-25x2-1, Parameters=6502024.06 | 29.34 | 4.98 | — | — | — | |
| Optimized Sign ExtractionModel architecture=50-25x2-1, Parameters=6502024.06 | 29.64 | 0.34 | 1,465 | 378,873 | 115 | |
| Optimized Sign ExtractionModel architecture=60-30x2-1, Parameters=9302024.06 | 40.8 | 0.5 | 1,304 | — | 117 | |
| CarliniModel architecture=60-30x2-1, Parameters=9302024.06 | 41.79 | — | — | — | — | |
| Canales-MartinezModel architecture=60-30x2-1, Parameters=9302024.06 | 41.79 | 6.52 | — | — | — | |
| Optimized Sign ExtractionModel architecture=70-35x2-1, Parameters=12602024.06 | 46.15 | 0.77 | 1,374 | — | 252 | |
| Optimized Sign ExtractionModel architecture=80-40x2-1, Parameters=16402024.06 | 65.93 | 0.94 | 1,432 | — | 120 | |
| CarliniModel architecture=80-40x2-1, Parameters=16402024.06 | 67.01 | — | — | — | — | |
| Canales-MartinezModel architecture=80-40x2-1, Parameters=16402024.06 | 67.01 | 13.46 | — | — | — | |
| Optimized Sign ExtractionModel architecture=90-45x2-1, Parameters=20702024.06 | 94.37 | 1.41 | 1,320 | — | 120 | |
| CarliniModel architecture=90-45x2-1, Parameters=20702024.06 | 96.28 | — | — | — | — | |
| Canales-MartinezModel architecture=90-45x2-1, Parameters=20702024.06 | 96.28 | 18.61 | — | — | — | |
| CarliniModel architecture=70-35x2-1, Parameters=12602024.06 | 107.7 | — | — | — | — | |
| Canales-MartinezModel architecture=70-35x2-1, Parameters=12602024.06 | 107.7 | 10.58 | — | — | — | |
| Optimized Sign ExtractionModel architecture=100-50x2-1, Parameters=25502024.06 | 186.53 | 1.82 | 1,125 | — | 121 | |
| CarliniModel architecture=100-50x2-1, Parameters=25502024.06 | 206.65 | — | — | — | — | |
| Canales-MartinezModel architecture=100-50x2-1, Parameters=25502024.06 | 206.65 | 20.47 | — | — | — |