{"id":"W4382317858","doi":"10.1609/aaai.v37i8.26150","title":"DisGUIDE: Disagreement-Guided Data-Free Model Extraction","year":2023,"lang":"en","type":"article","venue":"Proceedings of the AAAI Conference on Artificial Intelligence","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":19,"is_retracted":false,"has_abstract":true,"ca_institutions":"York University","funders":"University of Waterloo; Purdue University; National Science Foundation","keywords":"Computer science; Generator (circuit theory); Data mining; Machine learning; Data extraction; Scheme (mathematics); Artificial intelligence; Power (physics)","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["open_science"],"consensus_categories":[],"category_scores_codex":[0.001338692,0.0002724954,0.0002791193,0.0002038784,0.0003633022,0.0003376055,0.007844091,0.0001046128,0.00004700187],"category_scores_gemma":[0.002281138,0.0002144519,0.0000995095,0.001320077,0.0002292774,0.001405577,0.003645468,0.0004805231,0.0002238306],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00006612318,"about_ca_system_score_gemma":0.0001311198,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00005734734,"about_ca_topic_score_gemma":0.0000150761,"domain_scores_codex":[0.9970077,0.00002902884,0.0007111039,0.0008526698,0.0009147963,0.0004847097],"domain_scores_gemma":[0.9973319,0.0001745726,0.0005282707,0.001413806,0.0004494441,0.0001020482],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0000305623,0.000084133,0.00022676,0.00003835036,0.00002110417,0.000001255952,0.0008700725,0.02403573,0.01558456,0.9022144,0.00516728,0.05172576],"study_design_scores_gemma":[0.00003051052,0.00003542124,0.0001254429,0.00008249736,0.00001263678,0.000002800256,0.0002474264,0.7584627,0.02694567,0.2137383,0.0001277818,0.000188873],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.04432424,0.00001399948,0.9108979,0.02036684,0.001708351,0.0008946406,0.00003588722,0.0008603921,0.0208978],"genre_scores_gemma":[0.981306,0.00003902968,0.01722645,0.000163447,0.0001312485,0.00002768496,0.000005837873,0.00002323251,0.001077141],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9369817,"threshold_uncertainty_score":0.997524,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.2242784790751523,"score_gpt":0.3819567872458058,"score_spread":0.1576783081706535,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}