The IP question, as an attack. This lesson sits inside Module I — The surface — of AI Security, the course that anchors the AI Policy and Safety program. It is not a survey; it is the specific, working understanding of "Model theft and extraction" that the rest of the course assumes you carry forward.
- 01Define Model theft and extraction in the precise sense used across AI Security.
- 02Recognize when Model theft and extraction is the correct lens for the situation in front of you, and when it is not.
- 03Apply Model theft and extraction to a concrete case drawn from The surface, and defend the result in plain language.
- 04Connect Model theft and extraction to the adjacent lessons in this module without collapsing the distinctions between them.
The idea, stated plainly
The IP question, as an attack. That single sentence is the whole lesson in compressed form. The rest of the reading unfolds it — what it means when the terms are taken seriously, where it comes from, and what work it does inside AI Security. Read the sentence, then read it again after the sections below; it should carry more weight the second time.
Why it belongs in The surface
Module I exists because where ai systems are attacked. "Model theft and extraction" is one of the pillars of that module: without it, the later lessons either become memorization or lose their bite. Notice which earlier lessons this one leans on, and which later lessons will lean on it — the shape of the module is easier to see once you place this piece.
How the School of Artificial Intelligence faculty use it
In practice, working school of artificial intelligence professionals reach for this idea before they reach for a formula or a tool. It is a way of framing the problem so that the right question comes first. The mark of understanding is not that you can recite Model theft and extraction; it is that you catch yourself using it, unprompted, when the situation calls for it.
Common misreadings
The most frequent error is to treat Model theft and extraction as a slogan and skip the mechanics. The second most frequent is the opposite — treating the mechanics as the point, when the mechanics are only there to make the idea usable. Both errors collapse the same distinction, and both are correctable by returning to the one-line summary and asking what it actually claims.
- Model theft and extraction is a working tool, not a slogan.
- Its meaning is set by the module it lives in: The surface.
- Understanding is demonstrated by unprompted use in the correct situation.
- The adjacent lessons in this module are its natural context; read them together.
- 406 — AI Security, Module I: The surface — The parent module for this lesson. Re-read the module blurb after finishing the lesson.
- The Anabasis Academy — School of Artificial Intelligence, AI Policy and Safety — The wider program this lesson serves; the Certificate in AI Policy and Safety (Professional tier). credential ultimately certifies mastery of ideas like this one.