Cover Image

Beyond Labeling Oracles: What does it mean to steal ML models?

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Shafran, Avital, Shumailov, Ilia, Erdogdu, Murat A., Papernot, Nicolas
Format:	Preprint
Published:	2023
Subjects:	Machine Learning Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Beyond Laplace and Gaussian: Exploring the Generalized Gaussian Mechanism for Private Machine Learning
by: Rinberg, Roy, et al.
Published: (2025)

When Vision Fails: Text Attacks Against ViT and OCR
by: Boucher, Nicholas, et al.
Published: (2023)

Inexact Unlearning Needs More Careful Evaluations to Avoid a False Sense of Privacy
by: Hayes, Jamie, et al.
Published: (2024)

Gradients Look Alike: Sensitivity is Often Overestimated in DP-SGD
by: Thudi, Anvith, et al.
Published: (2023)

Rerouting LLM Routers
by: Shafran, Avital, et al.
Published: (2025)

Laundering AI Authority with Adversarial Examples
by: Zhang, Jie, et al.
Published: (2026)

Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents
by: Shafran, Avital, et al.
Published: (2024)

Architectural Neural Backdoors from First Principles
by: Langford, Harry, et al.
Published: (2024)

SEA: Shareable and Explainable Attribution for Query-based Black-box Attacks
by: Gao, Yue, et al.
Published: (2023)

Buffer Overflow in Mixture of Experts
by: Hayes, Jamie, et al.
Published: (2024)

Beyond Slow Signs in High-fidelity Model Extraction
by: Foerster, Hanna, et al.
Published: (2024)

Efficient Public Verification of Private ML via Regularization
by: Bell, Zoë Ruha, et al.
Published: (2025)

Architectural Backdoors for Within-Batch Data Stealing and Model Inference Manipulation
by: Küchler, Nicolas, et al.
Published: (2025)

ceLLMate: Sandboxing Browser AI Agents
by: Meng, Luoxi, et al.
Published: (2025)

Machine Learning needs Better Randomness Standards: Randomised Smoothing and PRNG-based attacks
by: Dahiya, Pranav, et al.
Published: (2023)

The Curse of Recursion: Training on Generated Data Makes Models Forget
by: Shumailov, Ilia, et al.
Published: (2023)

Tighter Privacy Auditing of DP-SGD in the Hidden State Threat Model
by: Cebere, Tudor, et al.
Published: (2024)

ImpNet: Imperceptible and blackbox-undetectable backdoors in compiled neural networks
by: Clifford, Eleanor, et al.
Published: (2022)

Soft Instruction De-escalation Defense
by: Walter, Nils Philipp, et al.
Published: (2025)

Watermarking Needs Input Repetition Masking
by: Khachaturov, David, et al.
Published: (2025)

UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AI
by: Shumailov, Ilia, et al.
Published: (2024)

Machine Learning Models Have a Supply Chain Problem
by: Meiklejohn, Sarah, et al.
Published: (2025)

Cascading Adversarial Bias from Injection to Distillation in Language Models
by: Chaudhari, Harsh, et al.
Published: (2025)

Quantamination: Dynamic Quantization Leaks Your Data Across the Batch
by: Foerster, Hanna, et al.
Published: (2026)

Breach By A Thousand Leaks: Unsafe Information Leakage in `Safe' AI Responses
by: Glukhov, David, et al.
Published: (2024)

On the Privacy Risk of In-context Learning
by: Duan, Haonan, et al.
Published: (2024)

Private Rate-Constrained Optimization with Applications to Fair Learning
by: Yaghini, Mohammad, et al.
Published: (2025)

Thought-Transfer: Indirect Targeted Poisoning Attacks on Chain-of-Thought Reasoning Models
by: Chaudhari, Harsh, et al.
Published: (2026)

The Fundamental Limits of Least-Privilege Learning
by: Stadler, Theresa, et al.
Published: (2024)

Learned-Database Systems Security
by: Schuster, Roei, et al.
Published: (2022)

Stealing User Prompts from Mixture of Experts
by: Yona, Itay, et al.
Published: (2024)

LLM Dataset Inference: Did you train on my dataset?
by: Maini, Pratyush, et al.
Published: (2024)

Augment then Smooth: Reconciling Differential Privacy with Certified Robustness
by: Wu, Jiapeng, et al.
Published: (2023)

Interpreting the Repeated Token Phenomenon in Large Language Models
by: Yona, Itay, et al.
Published: (2025)

Trusted Machine Learning Models Unlock Private Inference for Problems Currently Infeasible with Cryptography
by: Shumailov, Ilia, et al.
Published: (2025)

Reasoning Introduces New Poisoning Attacks Yet Makes Them More Complicated
by: Foerster, Hanna, et al.
Published: (2025)

Pr$εε$mpt: Sanitizing Sensitive Prompts for LLMs
by: Chowdhury, Amrita Roy, et al.
Published: (2025)

Decentralised, Collaborative, and Privacy-preserving Machine Learning for Multi-Hospital Data
by: Fang, Congyu, et al.
Published: (2024)

Have it your way: Individualized Privacy Assignment for DP-SGD
by: Boenisch, Franziska, et al.
Published: (2023)

Fast Exact Unlearning for In-Context Learning Data for LLMs
by: Muresanu, Andrei I., et al.
Published: (2024)