Marich: A Query-efficient Distributionally Equivalent Model Extraction Attack using Public Data

First, we define distributionally equivalent and Max-Information model extraction attacks, and reduce them into a variational optimisation problem.