Model Extraction Attacks

Reason about model extraction as a defender. Learn the conceptual attack (the adversary queries the model many times and trains a stand-in), the IP and safety implications (extracted model can lack the safety training of the original), query-budget defences, output-perturbation defences, watermarking research, the legal landscape around scraping and ToS, and the eval pattern for residual extractability.