模型功能性複製攻擊

Risk Description

Attackers query target APIs extensively, collecting input-output pairs as training data to train a functionally equivalent surrogate model. Unlike traditional model stealing (attempting to replicate exact parameters), functional replication only requires similar performance on target tasks. Attackers can use surrogate models to find adversarial vulnerabilities, bypass usage restrictions, or compete commercially.