Add more model extraction attacks #68
Labels
extraction
Related to model extraction attacks
good first issue
Good for newcomers
help wanted
Extra attention is needed
user-facing
Features that will directly impact users
Is your feature request related to a problem? Please describe.
We want every model extraction attack to be achievable in PrivacyRaven. This does not include side channel, white-box, full or partial prediction, or explanation-based attacks.
Describe the solution you'd like.
PrivacyRaven has three interfaces for attacks:
A user should be able to run the attack in every interface; this means that all the building blocks for the attack should be contained within PrivacyRaven. For example, new synthesizers or subset selection strategies for a specific attack should be added, so that it can be applied using the core interface.
If you would like to implement an attack, comment with the name of the paper. Then, create a new issue referencing this issue with the name of the paper in the title.
Detail any additional context.
This is a list of papers describing model extraction attacks that should be added to PrivacyRaven.
The text was updated successfully, but these errors were encountered: