SAME: A Sample Reconstruction Defense Against Model Extraction Attacks

SAME defends against model extraction attacks through sample reconstruction and lowers the prerequisites on the defender's capabilities. It requires no auxiliary OOD dataset, user query history, or white-box model access, needs no additional intervention during model training, and is compatible with existing proactive defense methods. Experiments show its effectiveness is better than SOTA solutions.