CISPA Helmholtz Center for Information Security; Max Planck Institute for Informatics
model functionality stealing;adversarial machine learning
Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks