Model Extraction on Tox21
97.6FidelityBoundary (XSTEAL)
Evaluation Results
| Method | Links | ||
|---|---|---|---|
| Boundary (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 97.6 | 80.2 | |
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 94.9 | 83.3 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 94.9 | 80.8 | |
| Boundary (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 93.7 | 77.8 | |
| Hybrid (XSTEAL)Explainer=GNNExp, Victim Model Architecture=GAT2026.05 | 93.7 | 77.8 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 93.6 | 79.5 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 92.9 | 82.1 | |
| Hybrid (XSTEAL)Explainer=PGExp, Victim Model Architecture=GAT2026.05 | 92.9 | 80.2 | |
| Hybrid (XSTEAL)Explainer=PGExplainer, Victim Model=GCN2026.05 | 91.7 | 80.9 | |
| ShadowExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 91.3 | 80.2 | |
| Boundary (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 89.3 | 83.3 | |
| ShadowExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 85.9 | 74.4 | |
| Boundary (XSTEAL)Explainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 80.8 | 71.8 | |
| EGSteal-BBExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 80.2 | 70.6 | |
| Hybrid (XSTEAL)Explainer=GNNExplainer, Victim Model=GCN2026.05 | 77.4 | 76.2 | |
| Shadow-OnlyExplainer=GNNExplainer, Victim Model=GCN2026.05 | 60.7 | 54.8 | |
| Shadow-OnlyExplainer=PGExplainer, Victim Model=GCN2026.05 | 57.1 | 51.2 | |
| EGSteal-BBExplainer=PGExp, Victim Model Architecture=GAT2026.05 | 55.6 | 63.5 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 55.1 | 56.4 | |
| Non-boundaryExplainer=GNNExplainer, Victim Model=GCN2026.05 | 54.8 | 48.8 | |
| EGSteal-BBExplainer=GNNExplainer, Victim Model=GCN2026.05 | 54.8 | 48.8 | |
| Non-boundaryExplainer=GNNExp, Victim Model Architecture=GAT2026.05 | 50.8 | 66.7 | |
| Non-boundaryExplainer=GNNExplainer, Victim Architecture=GraphSAGE2026.05 | 50 | 59 | |
| EGSteal-BBExplainer=PGExplainer, Victim Architecture=GraphSAGE2026.05 | 50 | 59 |