Weight Extraction on MNIST 784-8(8)-1
100Weight Recovery RateEnd-to-End Model Extraction
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| End-to-End Model ExtractionLayer=L1, Critical Points=5002025.06 | 100 | 8 | 324 | — | |
| End-to-End Model ExtractionLayer=L2, Critical Points=30002025.06 | 100 | 7 | 75 | — | |
| End-to-End Model ExtractionLayer=L3, Critical Points=30002025.06 | 100 | 8 | 737 | — | |
| End-to-End Model ExtractionLayer=L4, Critical Points=30002025.06 | 100 | 7 | 1,041 | — | |
| End-to-End Model ExtractionLayer=L92025.06 | 100 | 1 | 0.01 | 0 | |
| End-to-End Model ExtractionLayer=Entire Model2025.06 | 99.71 | — | 26 | — | |
| End-to-End Model ExtractionLayer=L8, Critical Points=30002025.06 | 92.86 | 6 | 3,646 | — | |
| End-to-End Model ExtractionLayer=L6, Critical Points=30002025.06 | 90.91 | 7 | 2,829 | — | |
| End-to-End Model ExtractionLayer=L7, Critical Points=30002025.06 | 88.24 | 8 | 2,038 | — | |
| End-to-End Model ExtractionLayer=L5, Critical Points=30002025.06 | 85.37 | 6 | 1,146 | — |