About the setting.

[kxgong]

Hi there, thanks for your great work!!!
I have a question about the setting of this work. Does this work assume that the 'stealer' can access and only access the logits output of the teacher model? And the model resources like model structure and parameters are invisible?

[HowieMa]

Hi, thanks for your interest in our work. Your understanding is correct. We assume the teacher model is a black-box API and we can only access its input-output behavior.

[kxgong]

Thanks for your instant reply!
Nasty teacher is a solid work!