Stealing_DL_Models

Copycat CNN

Here you can find the models, the datasets information and the code used in our experiments (Copycat and Copycat Expansion). Feel free to contact me for any questions or suggestions (jacsonrcsilva at gmail).

Note that we used the Caffe Framework (1, 2). Therefore, you will find the “prototxt” files to replicate our experiments.

But if you don’t want to use Caffe, it is not a problem. In order to make it easier for you, we are also providing the following codes implemented in PyTorch:

• Copycat Example; and
• Copycat Framework to you apply/test Copycat Method against your own data.

Also, if you want to see an interactive comparison between Oracle and Copycat models, visit: Copycat CNN Explainer
It is implemented in TensorflowJS, using the CNN Explainer system.

If something here was useful to you, please kindly cite our article (s) below.

😊

1. Stealing Knowledge by Persuading Confession with Random Non-Labeled Data

Project Details and Code

This paper is available on arXiv

@inproceedings{Correia-Silva-IJCNN2018,
  author={Jacson Rodrigues {Correia-Silva} and Rodrigo F. {Berriel} and Claudine {Badue} and Alberto F. {de Souza} and Thiago {Oliveira-Santos}},
  booktitle={2018 International Joint Conference on Neural Networks (IJCNN)},
  title={Copycat {CNN}: Stealing Knowledge by Persuading Confession with Random Non-Labeled Data},
  year={2018},
  pages={1-8},
  doi={10.1109/IJCNN.2018.8489592},
  ISSN={2161-4407},
  month={July}
}

2. Copycat CNN: Are Random Non-Labeled Data Enough to Steal Knowledge from Black-box Models?

Project Details and Code

This paper is available on arXiv

@article{Correia-Silva-PATREC2021,
  author={Jacson Rodrigues {Correia-Silva} and Rodrigo F. {Berriel} and Claudine {Badue} and Alberto F. {De Souza} and Thiago {Oliveira-Santos}},
  title={Copycat {CNN}: Are random non-Labeled data enough to steal knowledge from black-box models?},
  journal={Pattern Recognition},
  volume={113},
  pages={107830},
  year={2021},
  issn={0031-3203}
}

3. An example of how to use Copycat Method

Example Code for Copycat in PyTorch

4. Our Framework in PyTorch to use Copycat Method on your experiments/data

Copycat Framework

The PyTorch Weights for Oracle and Copycat models can be downloaded here

5. My Thesis:

Copycat CNN: Convolutional Neural Network Extraction Attack with Unlabeled Natural Images (more details)
(2nd download option)

The PyTorch Weights for Oracle and Copycat models can be downloaded here

@phdthesis{correia-silva-phd-2023,
    author = {Correia-Silva, Jacson Rodrigues},
    title = {Copycat CNN: Convolutional Neural Network Extraction Attack with Unlabeled Natural Images},
    year = {2023},
    school = {Universidade Federal do Esp\'{i}rito Santo},
    address = {Esp\'{i}rito Santo, Brazil},
}