Fully Exploiting Every Real Sample: SuperPixel Sample Gradient Model Stealing

1 code implementation • CVPR 2024 • Yunlong Zhao, Xiaoheng Deng, Yijing Liu, Xinjun Pei, Jiazhi Xia, Wei Chen

With the basic idea of imitating the victim model's low-variance patch-level gradients instead of pixel-level gradients, SPSG achieves efficient sample gradient estimation through two steps.