Teleportation: Defense Against Stealing Attacks of Data-Driven Healthcare APIs

Summary

The paper proposes a defense against model-extraction attacks on data-driven healthcare APIs built on electronic health records. The method applies adaptive teleportation to incoming queries, guided by a bi-level optimization target and Wasserstein gradient flows, to push attack queries across decision boundaries while limiting changes to benign queries. Tested on in-hospital mortality, bleed risk and ischemic risk prediction, it suppresses cloned-model performance while keeping comparable serving utility to existing defenses.

Mitigation

The proposed defense is adaptive teleportation of incoming queries, generated from the formulated bi-level optimization target and following Wasserstein gradient flows (WGFs), to mislead attacking queries while preserving benign-query utility.

Related items

• MediumGoogle: LLMjacking attacks rack up $1 million in cloud AI chargesSimilar attack · BleepingComputer
• LowExtracting System Prompt of LLM Services in Complex (Agentic) Settings: Hierarchical Optimization and Reliable Evaluation MetricsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoMCP Tool Poisoning in Agentic AI Frameworks: A Cross-Framework Measurement StudySimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• MediumHow We Took Over ChatGPT AccountsSimilar attack · Simon Willison's Weblog
• Medium“Black October” for AI Developer PlatformsSimilar attack · Wiz Research Blog