Research question
Can models behind prediction APIs be reconstructed from their outputs?
Key findings
- Equation-solving and path-finding attacks extract near-equivalent models from BigML and Amazon ML with hundreds of queries - Confidence values dramatically ease extraction
