Stealing Machine Learning Models via Prediction APIs
Date: 2016-08
Affected: BigML, Amazon Machine Learning, generic prediction APIs
Attack vector: model-extraction
Category: research
Severity: High

Tramer et al. show that ML-as-a-service models (BigML, Amazon ML) can be extracted with near-perfect fidelity through prediction-API queries. Includes attacks for logistic regression, neural nets, and decision trees. USENIX Security 2016.


Mitigations:

Architectural layers (MAESTRO):