{"id":"https://openalex.org/W4410609024","doi":"https://doi.org/10.1109/satml64287.2025.00016","title":"Attackers Can Do Better: Over- and Understated Factors of Model Stealing Attacks","display_name":"Attackers Can Do Better: Over- and Understated Factors of Model Stealing Attacks","publication_year":2025,"publication_date":"2025-04-09","ids":{"openalex":"https://openalex.org/W4410609024","doi":"https://doi.org/10.1109/satml64287.2025.00016"},"language":"en","primary_location":{"id":"doi:10.1109/satml64287.2025.00016","is_oa":false,"landing_page_url":"https://doi.org/10.1109/satml64287.2025.00016","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088223848","display_name":"Daryna Oliynyk","orcid":"https://orcid.org/0000-0001-6990-4321"},"institutions":[{"id":"https://openalex.org/I129774422","display_name":"University of Vienna","ror":"https://ror.org/03prydq77","country_code":"AT","type":"education","lineage":["https://openalex.org/I129774422"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Daryna Oliynyk","raw_affiliation_strings":["University of Vienna,CDL AsTra, Faculty of Computer Science,Vienna,Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Vienna,CDL AsTra, Faculty of Computer Science,Vienna,Austria","institution_ids":["https://openalex.org/I129774422"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054726748","display_name":"Rudolf Mayer","orcid":"https://orcid.org/0000-0003-0424-5999"},"institutions":[{"id":"https://openalex.org/I4210167190","display_name":"SBA Research","ror":"https://ror.org/05nny6x17","country_code":"AT","type":"facility","lineage":["https://openalex.org/I4210167190"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Rudolf Mayer","raw_affiliation_strings":["SBA Research,Vienna,Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SBA Research,Vienna,Austria","institution_ids":["https://openalex.org/I4210167190"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057690103","display_name":"Andreas Rauber","orcid":"https://orcid.org/0000-0002-9272-6225"},"institutions":[{"id":"https://openalex.org/I145847075","display_name":"TU Wien","ror":"https://ror.org/04d836q62","country_code":"AT","type":"education","lineage":["https://openalex.org/I145847075"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Andreas Rauber","raw_affiliation_strings":["Institute of Information Systems Engineering,Faculty of Informatics, TU Wien,Vienna,Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Systems Engineering,Faculty of Informatics, TU Wien,Vienna,Austria","institution_ids":["https://openalex.org/I145847075"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.9814,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.81004383,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"150","last_page":"168"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9690999984741211,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9690999984741211,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9383000135421753,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9244999885559082,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6884487867355347},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.603527307510376},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.4131860136985779}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6884487867355347},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.603527307510376},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4131860136985779}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/satml64287.2025.00016","is_oa":false,"landing_page_url":"https://doi.org/10.1109/satml64287.2025.00016","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":54,"referenced_works":["https://openalex.org/W2051267297","https://openalex.org/W2461943168","https://openalex.org/W2603766943","https://openalex.org/W2754049786","https://openalex.org/W2963560987","https://openalex.org/W3007318395","https://openalex.org/W3025724348","https://openalex.org/W3087685156","https://openalex.org/W3094357937","https://openalex.org/W3139434763","https://openalex.org/W3164878287","https://openalex.org/W3168455774","https://openalex.org/W3174136778","https://openalex.org/W3178659068","https://openalex.org/W4287186155","https://openalex.org/W4296106209","https://openalex.org/W4296918498","https://openalex.org/W4319160217","https://openalex.org/W4323543429","https://openalex.org/W4367368092","https://openalex.org/W4379161810","https://openalex.org/W4383221380","https://openalex.org/W4385756508","https://openalex.org/W4386811827","https://openalex.org/W4386815519","https://openalex.org/W4388563019","https://openalex.org/W4392173971","https://openalex.org/W4400913543","https://openalex.org/W6690607325","https://openalex.org/W6747231328","https://openalex.org/W6751219861","https://openalex.org/W6752880445","https://openalex.org/W6757088580","https://openalex.org/W6760237559","https://openalex.org/W6766578876","https://openalex.org/W6770088130","https://openalex.org/W6772047124","https://openalex.org/W6772101090","https://openalex.org/W6772456500","https://openalex.org/W6775078712","https://openalex.org/W6786241406","https://openalex.org/W6787972765","https://openalex.org/W6789723219","https://openalex.org/W6794487020","https://openalex.org/W6799649567","https://openalex.org/W6809859015","https://openalex.org/W6838590512","https://openalex.org/W6838755830","https://openalex.org/W6839928986","https://openalex.org/W6848025125","https://openalex.org/W6854336291","https://openalex.org/W6854412789","https://openalex.org/W6857297827","https://openalex.org/W6858171034"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4322731571","https://openalex.org/W1929087753","https://openalex.org/W4400055136","https://openalex.org/W2886023993","https://openalex.org/W3185781018","https://openalex.org/W2113607124"],"abstract_inverted_index":{"Machine":[0],"learning":[1,34,193],"(ML)":[2],"models":[3,55,164,187],"were":[4],"shown":[5,285],"to":[6,9,15,31,73,94,178,236,279],"be":[7,39],"vulnerable":[8],"model":[10,24,35,275],"stealing":[11],"attacks,":[12],"which":[13],"lead":[14],"intellectual":[16,277],"property":[17,278],"infringement.":[18],"Among":[19],"other":[20],"attack":[21,29,152],"methods,":[22],"substitute":[23,54,61,85,121,198],"training":[25,62,122],"is":[26,233],"an":[27,80,218],"all-encompassing":[28],"applicable":[30],"any":[32],"machine":[33],"whose":[36],"behaviour":[37],"can":[38],"approximated":[40],"from":[41,112,182],"input-output":[42],"queries.":[43,249],"Whereas":[44],"previous":[45,259],"works":[46],"mainly":[47],"focused":[48],"on":[49,83,119,211],"improving":[50],"the":[51,75,77,84,105,114,130,138,170,180,183,189,197,227,244,256],"performance":[52,257],"of":[53,79,108,129,185,191,214,246,248,258],"by,":[56],"e.g.":[57],"developing":[58],"a":[59,89,120,204,263,274,280],"new":[60,149],"method,":[63],"there":[64,232],"have":[65,133],"been":[66,134],"only":[67],"limited":[68,229],"ablation":[69],"studies":[70],"that":[71,127,132,144,161,224,261,267],"try":[72],"understand":[74],"impact":[76],"strength":[78],"attacker":[81],"has":[82],"model's":[86],"performance.":[87],"As":[88],"result,":[90],"different":[91,109],"authors":[92],"came":[93],"diverse,":[95],"sometimes":[96],"contradicting,":[97],"conclusions.":[98],"In":[99,157],"this":[100,173],"work,":[101],"we":[102,147,159,176,208,222],"exhaustively":[103],"examine":[104],"ambivalent":[106],"influence":[107],"factors":[110,131],"resulting":[111],"varying":[113],"attacker's":[115],"capabilities":[116,242],"and":[117,154,168,217],"knowledge":[118,239],"attack.":[123],"Our":[124,250],"findings":[125],"suggest":[126,209],"some":[128],"considered":[135],"important":[136],"in":[137,141,226,243],"past":[139],"are,":[140],"fact,":[142],"not":[143],"influential;":[145],"instead,":[146],"discover":[148],"correlations":[150],"between":[151],"conditions":[153],"success":[155],"rate.":[156],"particular,":[158],"demonstrate":[160,223],"better-performing":[162],"target":[163,186],"enable":[165],"higher-fidelity":[166],"attacks":[167,260,270],"explain":[169],"intuition":[171],"behind":[172],"phenomenon.":[174],"Further,":[175],"propose":[177],"shift":[179],"focus":[181],"complexity":[184,190,216],"toward":[188],"their":[192],"tasks.":[194],"Therefore,":[195],"for":[196,203],"model,":[199],"rather":[200],"than":[201,284],"aiming":[202],"higher":[205,215,282],"architecture":[206],"complexity,":[207],"focusing":[210],"getting":[212],"data":[213],"appropriate":[219],"architecture.":[220],"Finally,":[221],"even":[225],"most":[228],"data-free":[230],"scenario,":[231],"no":[234],"need":[235],"overcompensate":[237],"weak":[238],"with":[240],"unrealistic":[241],"form":[245],"millions":[247],"results":[251],"often":[252],"exceed":[253],"or":[254],"match":[255],"assume":[262],"stronger":[264,269],"attacker,":[265],"suggesting":[266],"these":[268],"are":[271],"likely":[272],"endangering":[273],"owner's":[276],"significantly":[281],"degree":[283],"until":[286],"now.":[287]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}