Weight Extraction on MNIST 784-16(8)-1
0.01Time (s)End-to-End Model Extraction
Evaluation Results
| Method | Links | |||||
|---|---|---|---|---|---|---|
| End-to-End Model ExtractionLayer=L92025.06 | 0.01 | 1 | 100 | 0 | — | |
| Foerster et al.Layer=L92025.06 | 0.01 | — | — | 0 | 100 | |
| End-to-End Model ExtractionLayer=L5, Critical Points=30002025.06 | 139 | 16 | 99.21 | — | — | |
| End-to-End Model ExtractionLayer=L7, Critical Points=30002025.06 | 148 | 16 | 98.64 | — | — | |
| End-to-End Model ExtractionLayer=L6, Critical Points=30002025.06 | 213 | 15 | 97.01 | — | — | |
| Foerster et al.Layer=L12025.06 | 246 | — | — | — | 100 | |
| End-to-End Model ExtractionLayer=L8, Critical Points=30002025.06 | 356 | 12 | 93.78 | — | — | |
| End-to-End Model ExtractionLayer=L1, Critical Points=5002025.06 | 617 | 16 | 100 | — | — | |
| Foerster et al.Layer=L22025.06 | 750 | — | — | — | 100 | |
| End-to-End Model ExtractionLayer=Entire Model2025.06 | 1,117 | — | 99.82 | — | — | |
| End-to-End Model ExtractionLayer=L2, Critical Points=30002025.06 | 2,613 | 16 | 100 | — | — | |
| End-to-End Model ExtractionLayer=L3, Critical Points=30002025.06 | 2,857 | 16 | 100 | — | — | |
| End-to-End Model ExtractionLayer=L4, Critical Points=30002025.06 | 3,933 | 16 | 99.61 | — | — | |
| Foerster et al.Layer=L42025.06 | — | — | — | — | 37.5 | |
| Foerster et al.Layer=L82025.06 | — | — | — | — | 0 |