arXiv preprint ·
Fingerprinting the Dispatchers behind Distributed Model Extraction
- Published
- Source
- arXiv preprint, posted before peer review
- Original
- Read it at arXiv
- Topics
Abstract
API distillation campaigns try to hide model-stealing traffic by splitting requests across thousands of load-balanced accounts, which standard content classifiers often miss. However, request timestamps, specifically arrival time and stream completion time, reveal the underlying dispatching strategy, such as round-robin counters or key-shuffling pools. Using a 20 percent seed set, this timing analysis can forensically rank the remaining accounts of a campaign with 0.92 to 1.00 AUC within 20 minutes, even across thousands of real production accounts. While adaptive attackers struggle to hide rotating dispatchers using jitter, pinning keys successfully evades detection, though it can severely throttle throughput when quotas bind. Ultimately, timing exposes shared infrastructure patterns even when content filters fail.
The authors’ abstract, as arXiv lists it. arXiv’s listings, abstracts included, are free for anyone to reuse.
Read it on ReadSearch
Each opens after you create an account, and brings you back to this paper.
More in Machine Learning
Optimizing Recourse Under Predictive Multiplicity
Using Transformers for Teaching and Learning via Symbolic Distillation of Neural A-life Agents
Timing is Everything: Inferring Temporal Membership in Continually Updated Models
TriAttention: Unified Sparse Mixed-Precision Attention for Long-Context LLM Inference
Unsupervised Neural Operators for Rotating Relativistic Stars: High-Fidelity Equation of State Inference and Pulsar Spin Evolution at Scale
Get the few papers worth your time in Machine Learning every morning.
ReadSearch reads the new papers in your field each day and brings you the few worth reading, each with its key finding in a sentence.