Model Extraction on Synthie
51.3FidelityBoundary (XSTEAL)
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 51.3 | 44.2 | |
| Non-boundaryExplainer=GNNExplainer, Victim Model=GCN2026.05 | 47.4 | 44.2 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 46.8 | 40.4 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 46.2 | 43.6 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 46.2 | 40.4 | |
| Shadow-OnlyExplainer=PGExplainer, Victim Model=GCN2026.05 | 44.9 | 37.8 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Model=GCN2026.05 | 42.9 | 37.8 | |
| Shadow-OnlyExplainer=GNNExplainer, Victim Model=GCN2026.05 | 39.7 | 35.3 | |
| Hybrid (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 39.7 | 26.5 | |
| ShadowExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 38.2 | 44.1 | |
| EGSteal-BBExplainer=PGExp, Victim Model Architecture=GAT2026.05 | 38.2 | 32.4 | |
| Boundary (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 38.2 | 44.1 | |
| Non-boundaryExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 36.8 | 30.9 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 32.9 | 36.8 | |
| Boundary (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 32.4 | 38.2 | |
| EGSteal-BBExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 30.9 | 27.9 | |
| Hybrid (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 29.4 | 32.4 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 28.9 | 28.9 | |
| EGSteal-BBExplainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 28.9 | 28.9 | |
| ShadowExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 26.3 | 28.9 | |
| Non-boundaryExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 23.7 | 25 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 21.1 | 19.7 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 21.1 | 25 | |
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 19.7 | 19.7 |