University of Michigan, Ann Arbor MI, USA; Georgia Institute of Technology, Atlanta GA, USA
Sanjay Kariyappa, Atul Prakash, Moinuddin K Qureshi
MAZE: Data-Free Model Stealing Attack Using Zeroth-Order Gradient Estimation