{"id":"https://openalex.org/W4367368092","doi":"https://doi.org/10.1145/3595292","title":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","display_name":"I Know What You Trained Last Summer: A Survey on Stealing Machine Learning Models and Defences","publication_year":2023,"publication_date":"2023-04-29","ids":{"openalex":"https://openalex.org/W4367368092","doi":"https://doi.org/10.1145/3595292"},"language":"en","primary_location":{"id":"doi:10.1145/3595292","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3595292","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3595292","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3595292","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088223848","display_name":"Daryna Oliynyk","orcid":"https://orcid.org/0000-0001-6990-4321"},"institutions":[{"id":"https://openalex.org/I4210167190","display_name":"SBA Research","ror":"https://ror.org/05nny6x17","country_code":"AT","type":"facility","lineage":["https://openalex.org/I4210167190"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Daryna Oliynyk","raw_affiliation_strings":["SBA Research, Austria"],"raw_orcid":"https://orcid.org/0000-0001-6990-4321","affiliations":[{"raw_affiliation_string":"SBA Research, Austria","institution_ids":["https://openalex.org/I4210167190"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054726748","display_name":"Rudolf Mayer","orcid":"https://orcid.org/0000-0003-0424-5999"},"institutions":[{"id":"https://openalex.org/I4210167190","display_name":"SBA Research","ror":"https://ror.org/05nny6x17","country_code":"AT","type":"facility","lineage":["https://openalex.org/I4210167190"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Rudolf Mayer","raw_affiliation_strings":["SBA Research & Vienna University of Technology, Austria"],"raw_orcid":"https://orcid.org/0000-0003-0424-5999","affiliations":[{"raw_affiliation_string":"SBA Research & Vienna University of Technology, Austria","institution_ids":["https://openalex.org/I4210167190"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057690103","display_name":"Andreas Rauber","orcid":"https://orcid.org/0000-0002-9272-6225"},"institutions":[{"id":"https://openalex.org/I145847075","display_name":"TU Wien","ror":"https://ror.org/04d836q62","country_code":"AT","type":"education","lineage":["https://openalex.org/I145847075"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Andreas Rauber","raw_affiliation_strings":["Vienna University of Technology, Austria"],"raw_orcid":"https://orcid.org/0000-0002-9272-6225","affiliations":[{"raw_affiliation_string":"Vienna University of Technology, Austria","institution_ids":["https://openalex.org/I145847075"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":15.7749,"has_fulltext":true,"cited_by_count":121,"citation_normalized_percentile":{"value":0.99403225,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"55","issue":"14s","first_page":"1","last_page":"41"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.991599977016449,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9904999732971191,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8580914735794067},{"id":"https://openalex.org/keywords/hyperparameter","display_name":"Hyperparameter","score":0.7872065305709839},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6171438097953796},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.553077220916748},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.45044273138046265},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.45036056637763977},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.44704416394233704},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.4147516191005707},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.39219406247138977},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.36573606729507446}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8580914735794067},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.7872065305709839},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6171438097953796},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.553077220916748},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.45044273138046265},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.45036056637763977},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.44704416394233704},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.4147516191005707},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39219406247138977},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.36573606729507446},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3595292","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3595292","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3595292","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3595292","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3595292","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3595292","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G434337789","display_name":null,"funder_award_id":"HORIZON2020","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G8029424273","display_name":"Privacy preserving federated machine learning and blockchaining for reduced cyber risks in a world of distributed healthcare","funder_award_id":"826078","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320329167","display_name":"SBA Research","ror":"https://ror.org/05nny6x17"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4367368092.pdf","grobid_xml":"https://content.openalex.org/works/W4367368092.grobid-xml"},"referenced_works_count":123,"referenced_works":["https://openalex.org/W398859631","https://openalex.org/W569478347","https://openalex.org/W1613874182","https://openalex.org/W1832693441","https://openalex.org/W1997824659","https://openalex.org/W2103289002","https://openalex.org/W2104599106","https://openalex.org/W2116341502","https://openalex.org/W2151298633","https://openalex.org/W2165698076","https://openalex.org/W2184652140","https://openalex.org/W2294370754","https://openalex.org/W2296452361","https://openalex.org/W2350778671","https://openalex.org/W2525579820","https://openalex.org/W2535690855","https://openalex.org/W2541711215","https://openalex.org/W2572504188","https://openalex.org/W2592549418","https://openalex.org/W2593390416","https://openalex.org/W2595840341","https://openalex.org/W2603766943","https://openalex.org/W2603775267","https://openalex.org/W2604382266","https://openalex.org/W2607306520","https://openalex.org/W2623427976","https://openalex.org/W2626914210","https://openalex.org/W2773459750","https://openalex.org/W2783538964","https://openalex.org/W2807363941","https://openalex.org/W2808195004","https://openalex.org/W2809523935","https://openalex.org/W2903158431","https://openalex.org/W2911978475","https://openalex.org/W2913608505","https://openalex.org/W2919491917","https://openalex.org/W2951308087","https://openalex.org/W2962858109","https://openalex.org/W2963162645","https://openalex.org/W2963303354","https://openalex.org/W2963465081","https://openalex.org/W2963560987","https://openalex.org/W2963844355","https://openalex.org/W2963882994","https://openalex.org/W2969695741","https://openalex.org/W2972997402","https://openalex.org/W2973414778","https://openalex.org/W2978223337","https://openalex.org/W2981463119","https://openalex.org/W2984103614","https://openalex.org/W2990887689","https://openalex.org/W2997146418","https://openalex.org/W3005346446","https://openalex.org/W3007318395","https://openalex.org/W3008983606","https://openalex.org/W3013063111","https://openalex.org/W3023742835","https://openalex.org/W3025724348","https://openalex.org/W3035379805","https://openalex.org/W3039995674","https://openalex.org/W3081488247","https://openalex.org/W3082305010","https://openalex.org/W3087685156","https://openalex.org/W3094357935","https://openalex.org/W3095964145","https://openalex.org/W3101503940","https://openalex.org/W3102836279","https://openalex.org/W3106038055","https://openalex.org/W3106322382","https://openalex.org/W3107089345","https://openalex.org/W3114482311","https://openalex.org/W3117956433","https://openalex.org/W3119841746","https://openalex.org/W3131603948","https://openalex.org/W3139434763","https://openalex.org/W3141043040","https://openalex.org/W3156445793","https://openalex.org/W3164878287","https://openalex.org/W3168455774","https://openalex.org/W3174136778","https://openalex.org/W3178659068","https://openalex.org/W3179216274","https://openalex.org/W3181727351","https://openalex.org/W3183601864","https://openalex.org/W3190229640","https://openalex.org/W3197312262","https://openalex.org/W3200953672","https://openalex.org/W3203793726","https://openalex.org/W3206880386","https://openalex.org/W3208646583","https://openalex.org/W3213793813","https://openalex.org/W4200025412","https://openalex.org/W4200073937","https://openalex.org/W4210913758","https://openalex.org/W4212774754","https://openalex.org/W4214651231","https://openalex.org/W4221142837","https://openalex.org/W4221155126","https://openalex.org/W4229449242","https://openalex.org/W4231219113","https://openalex.org/W4235202118","https://openalex.org/W4241511027","https://openalex.org/W4243157141","https://openalex.org/W4245551996","https://openalex.org/W4247200422","https://openalex.org/W4254911106","https://openalex.org/W4281387281","https://openalex.org/W4281396648","https://openalex.org/W4283156875","https://openalex.org/W4285531802","https://openalex.org/W4286696412","https://openalex.org/W4287115309","https://openalex.org/W4287186155","https://openalex.org/W4288726484","https://openalex.org/W4293818672","https://openalex.org/W4294691467","https://openalex.org/W4296106209","https://openalex.org/W4296918498","https://openalex.org/W4296918516","https://openalex.org/W4312343407","https://openalex.org/W4322759142","https://openalex.org/W4367191550","https://openalex.org/W4386059972"],"related_works":["https://openalex.org/W4295309597","https://openalex.org/W4210794429","https://openalex.org/W4223456145","https://openalex.org/W4309113015","https://openalex.org/W3199608561","https://openalex.org/W4283697347","https://openalex.org/W4295681619","https://openalex.org/W3014815208","https://openalex.org/W4298144215","https://openalex.org/W4375930479"],"abstract_inverted_index":{"Machine-Learning-as-a-Service":[0],"(MLaaS)":[1],"has":[2],"become":[3],"a":[4,20,73,111,127,161],"widespread":[5],"paradigm,":[6],"making":[7],"even":[8],"the":[9,45,76,83,84,131,175,183],"most":[10],"complex":[11],"Machine":[12],"Learning":[13],"models":[14],"available":[15,186],"for":[16,163],"clients":[17],"via,":[18],"e.g.,":[19],"pay-per-query":[21],"principle.":[22],"This":[23],"allows":[24],"users":[25],"to":[26,44,173],"avoid":[27],"time-consuming":[28],"processes":[29],"of":[30,47,75,91,130,133],"data":[31],"collection,":[32],"hyperparameter":[33],"tuning,":[34],"and":[35,119,143,151,165,168,185],"model":[36,65,77,134,145],"training.":[37],"However,":[38],"by":[39,141,197],"giving":[40],"their":[41,53,149],"customers":[42],"access":[43],"(predictions":[46],"their)":[48],"models,":[49],"MLaaS":[50],"providers":[51],"endanger":[52],"intellectual":[54],"property":[55],"such":[56],"as":[57],"sensitive":[58],"training":[59],"data,":[60],"optimised":[61],"hyperparameters,":[62],"or":[63,178],"learned":[64],"parameters.":[66],"In":[67],"some":[68],"cases,":[69],"adversaries":[70],"can":[71],"create":[72],"copy":[74],"with":[78],"(almost)":[79],"identical":[80],"behaviour":[81],"using":[82],"prediction":[85],"labels":[86],"only.":[87],"While":[88],"many":[89],"variants":[90],"this":[92,140],"attack":[93,164,177,199],"have":[94,105],"been":[95,106],"described,":[96],"only":[97],"scattered":[98],"defence":[99,154,166,179],"strategies":[100],"that":[101],"address":[102,139],"isolated":[103],"threats":[104],"proposed.":[107],"To":[108],"arrive":[109],"at":[110],"comprehensive":[112],"understanding":[113],"why":[114],"these":[115],"attacks":[116],"are":[117,193],"successful":[118],"how":[120,172],"they":[121],"could":[122],"be":[123],"holistically":[124],"defended":[125],"against,":[126],"thorough":[128],"systematisation":[129],"field":[132],"stealing":[135,146],"is":[136],"necessary.":[137],"We":[138,159],"categorising":[142],"comparing":[144],"attacks,":[147],"assessing":[148],"performance,":[150],"exploring":[152],"corresponding":[153],"techniques":[155],"in":[156],"different":[157],"settings.":[158],"propose":[160],"taxonomy":[162],"approaches":[167],"provide":[169],"guidelines":[170],"on":[171,182],"select":[174],"right":[176],"strategy":[180],"based":[181],"goal":[184],"resources.":[187],"Finally,":[188],"we":[189],"analyse":[190],"which":[191],"defences":[192],"rendered":[194],"less":[195],"effective":[196],"current":[198],"strategies.":[200]},"counts_by_year":[{"year":2026,"cited_by_count":23},{"year":2025,"cited_by_count":42},{"year":2024,"cited_by_count":41},{"year":2023,"cited_by_count":15}],"updated_date":"2026-08-08T01:25:22.217667","created_date":"2025-10-10T00:00:00"}