Research question
Can a model's functionality be replicated using unrelated public images?
Key findings
- Querying with natural images from other datasets and training on outputs yields knockoffs at a fraction of cost - Adaptive query strategies improve efficiency
