Federated Learning (FL) is vulnerable to Model Extraction (ME) attacks that threaten Intellectual Property (IP) in Machine Learning as a Service (MLaaS) platforms.
A study examined the vulnerability of FL-based victim models to ME attacks, evaluating performance across deep learning architectures and image datasets.
Experimental results show that the accuracy and fidelity of extracted models in FL are influenced by the size of the attack query set.
Transfer learning is explored as an approach for ME attacks, indicating higher accuracy and fidelity in fine-tuned pretrained extraction models, especially with smaller query sets.