Abstract: Over the last several years, several ML security researchers (including those in my group) have explored ML model stealing attacks and defenses. The rough state-of-the-art consensus is that ...