Model extraction and model theft

A · 10-second intuition With enough queries, an attacker can train a copy that imitates a model's behaviour, or learn facts about its architecture and parameters.

Not started
Predict before you read

Which control most directly raises the cost of black-box extraction?