{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,11]],"date-time":"2026-05-11T10:57:17Z","timestamp":1778497037883,"version":"3.51.4"},"reference-count":27,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,7,31]],"date-time":"2023-07-31T00:00:00Z","timestamp":1690761600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,7,31]],"date-time":"2023-07-31T00:00:00Z","timestamp":1690761600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100004410","name":"The Scientific and Technological Research Council of Turkey (TUBITAK)","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100004410","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,7,31]]},"DOI":"10.1109\/csr57506.2023.10224959","type":"proceedings-article","created":{"date-parts":[[2023,8,28]],"date-time":"2023-08-28T17:50:16Z","timestamp":1693245016000},"page":"200-205","source":"Crossref","is-referenced-by-count":11,"title":["A Taxonomic Survey of Model Extraction Attacks"],"prefix":"10.1109","author":[{"given":"Didem","family":"Gen\u00e7","sequence":"first","affiliation":[{"name":"&#x0130;zmir Institute of Technology,Computer Engineering Department,&#x0130;zmir,T&#x00FC;rkiye,35430"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mustafa","family":"\u00d6zuysal","sequence":"additional","affiliation":[{"name":"&#x0130;zmir Institute of Technology,Computer Engineering Department,&#x0130;zmir,T&#x00FC;rkiye,35430"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Emrah","family":"Tomur","sequence":"additional","affiliation":[{"name":"Ericsson Research,&#x0130;stanbul,T&#x00FC;rkiye,34390"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"crossref","first-page":"323","DOI":"10.1016\/j.neunet.2012.02.016","article-title":"Man vs. computer: Benchmarking machine learning algorithms for traffic sign recognition","volume":"32","author":"stallkamp","year":"2012","journal-title":"Neural Networks"},{"key":"ref12","article-title":"Learning multiple layers of features from tiny images","author":"krizhevsky","year":"2009","journal-title":"Computer Science University of Toronto Tech Rep"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.01360"},{"key":"ref14","author":"lecun","year":"1998","journal-title":"The MNIST Database of Handwritten Digits"},{"key":"ref11","doi-asserted-by":"crossref","first-page":"248","DOI":"10.1109\/CVPR.2009.5206848","article-title":"Imagenet: A large-scale hierarchical image database","author":"deng","year":"2009","journal-title":"2009 IEEE Conference on Computer Vision and Pattern Recognition"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/THS.2017.7943475"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2019.00509"},{"key":"ref1","first-page":"601","article-title":"Stealing machine learning models via prediction apis","author":"tram\u00e8r","year":"2016","journal-title":"USENIX Security Symposium"},{"key":"ref17","article-title":"Megex: Data-free model extraction attack against gradient-based explainable ai","author":"miura","year":"2021","journal-title":"ArXiv Preprint"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR46437.2021.00474"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2021\/336"},{"key":"ref18","article-title":"First to possess his statistics: Data-free model extraction attack on tabular data","author":"tasumi","year":"2021","journal-title":"ArXiv Preprint"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1553374.1553380"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/2189\/1\/012024"},{"key":"ref26","article-title":"Training language models to follow instructions with human feedback","author":"ouyang","year":"2022","journal-title":"ArXiv Preprint"},{"key":"ref25","article-title":"Learning representations by maximizing mutual information across views","volume":"32","author":"bachman","year":"2019","journal-title":"Advances in neural information processing systems"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2019.00044"},{"key":"ref22","article-title":"Model extraction and defenses on generative adversarial networks","author":"hu","year":"2021","journal-title":"ArXiv Preprint"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24178"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR52688.2022.01042"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v34i01.5432"},{"key":"ref7","first-page":"1309","article-title":"Exploring connections between active learning and model extraction","author":"chandrasekaran","year":"2020","journal-title":"Proc of the 29th USENIX Conference on Security Symposium"},{"key":"ref9","first-page":"1345","article-title":"High accuracy and high fidelity extraction of neural networks","author":"jagielski","year":"2020","journal-title":"Proc of the 29th USENIX Conference on Security Symposium"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.001.2000196"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3338498.3358646"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/1081870.1081950"}],"event":{"name":"2023 IEEE International Conference on Cyber Security and Resilience (CSR)","location":"Venice, Italy","start":{"date-parts":[[2023,7,31]]},"end":{"date-parts":[[2023,8,2]]}},"container-title":["2023 IEEE International Conference on Cyber Security and Resilience (CSR)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10224900\/10224823\/10224959.pdf?arnumber=10224959","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,9,25]],"date-time":"2023-09-25T17:51:46Z","timestamp":1695664306000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10224959\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,31]]},"references-count":27,"URL":"https:\/\/doi.org\/10.1109\/csr57506.2023.10224959","relation":{},"subject":[],"published":{"date-parts":[[2023,7,31]]}}}