@inproceedings{defendingagainstdatafreemodelextraction1,
  title = {Defending against Data-Free Model Extraction by Distributionally Robust Defensive Training},
  year = {2023},
  booktitle = {NeurIPS 2023 11},
  url = {https://openreview.net/forum?id=7DZAVpOoAK},
}