Model Privacy: A Unified Framework to Understand Model Stealing Attacks and Defenses