CyberdeceptionAtlas · Question → testES

Library / Paper

Paper

HoneypotNet: Backdoor Attacks Against Model Extraction

According to the authors, this work proposes a defense paradigm called 'attack as defense' against model extraction attacks. They introduce HoneypotNet, which replaces the victim model's classification layer with a honeypot layer fine-tuned via bi-level optimization to poison any substitute model trained on its outputs, while preserving original performance.

HoneypotDecoyApplication

What we know

According to the authors, this work proposes a defense paradigm called 'attack as defense' against model extraction attacks. They introduce HoneypotNet, which replaces the victim model's classification layer with a honeypot layer fine-tuned via bi-level optimization to poison any substitute model trained on its outputs, while preserving original performance.

Evidence limits

This entry is based solely on the published title and abstract; the full text was not reviewed and the reported effectiveness has not been independently verified.

Reviewed: author abstract. Full-text results were not analyzed.

Sources and provenance

  1. HoneypotNet: Backdoor Attacks Against Model Extraction
    version-family-metadata · 2026-10-16
  2. HoneypotNet: Backdoor Attacks Against Model Extraction
    abstract · 2026-10-04

Reviewed: 2026-10-04. This record may change when new evidence is found.

RIS · BibTeX