[arXiv]score: 0.11

Threat Model Framework for Evaluating LLM Distillation Defenses

June 25, 2026

Output perturbation defenses against LLM distillation attacks lack a shared threat model, making robustness comparisons unreliable. This paper proposes a three-dimensional attacker framework covering query budget, data budget, and interface profile to standardize evaluation. The gap matters practically because imprecise threat models can create false compliance confidence for IP protection claims.

HOW THIS AFFECTS YOU

●

researcherWorth adopting this framework when evaluating or proposing new distillation defenses to enable apples-to-apples comparisons.

●

policyOrganizations citing output perturbation as an IP or regulatory compliance control should reassess — the threat model underspecification means existing defenses may not hold against realistic adversaries.

read original ↗arxiv.org

← back to feed