@article{defendingagainstdatafreemodelextraction,
  title = {Defending against Data-Free Model Extraction by Distributionally Robust Defensive Training},
  year = {2023},
  url = {https://openreview.net/forum?id=7DZAVpOoAK},
}