Surrogate detection under model extraction attack on MNIST
1AUCCOPYCOP
Evaluation results
| Method | Links | |
|---|---|---|
| COPYCOPGNN Architecture=GCN2026.05 | 1 | |
| COPYCOPGNN Architecture=GIN2026.05 | 1 | |
| COPYCOPGNN Architecture=GSage2026.05 | 1 | |
| COPYCOPGNN Architecture=MixHop2026.05 | 1 | |
| COPYCOPGNN Architecture=GCN2026.05 | 1 | |
| COPYCOPGNN Architecture=GIN2026.05 | 1 | |
| COPYCOPGNN Architecture=GSage2026.05 | 1 | |
| COPYCOPGNN Architecture=MixHop2026.05 | 1 | |
| PreGIPGNN Architecture=GCN2026.05 | 1 | |
| PreGIPGNN Architecture=GIN2026.05 | 0.95 | |
| PreGIPGNN Architecture=ARMA2026.05 | 0.85 | |
| PreGIPGNN Architecture=GCN2026.05 | 0.8 | |
| PreGIPGNN Architecture=ARMA2026.05 | 0.8 | |
| COPYCOPGNN Architecture=ARMA2026.05 | 0.78 | |
| COPYCOPGNN Architecture=ARMA2026.05 | 0.78 | |
| PreGIPGNN Architecture=MixHop2026.05 | 0.6 | |
| PreGIPGNN Architecture=GSage2026.05 | 0.6 | |
| PreGIPGNN Architecture=GSage2026.05 | 0.55 | |
| PreGIPGNN Architecture=MixHop2026.05 | 0.15 | |
| PreGIPGNN Architecture=GIN2026.05 | 0 |