Intellectual Property Identification Evasion on GNN4IP
-26.8Area Overhead (%)NetDeTox
Evaluation results
| Method | Links | |
|---|---|---|
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c880-SL25602025.11 | -26.8 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c880-SL25602025.11 | -26.69 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c880-RN25602025.11 | -15.21 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c880-CS12802025.11 | -13.77 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c880-RN25602025.11 | -12.51 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c499-RN12802025.11 | -8.35 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c880-RN12802025.11 | -6.89 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c880-SL12802025.11 | -5.99 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c880-RN6402025.11 | -5.74 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c880-SL25602025.11 | -5.34 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c880-CS12802025.11 | -4.6 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c880-SL12802025.11 | -4.58 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c880-SL12802025.11 | -3.77 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c880-CS25602025.11 | -3.27 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c880-CS6402025.11 | -3.15 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c880-SL12802025.11 | -3.13 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c880-SL3202025.11 | -3.07 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c880-RN6402025.11 | -2.75 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c880-SL3202025.11 | -2.58 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c880-RN3202025.11 | -2.51 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c880-RN3202025.11 | -2.51 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c880-SL3202025.11 | -2.4 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c880-CS25602025.11 | -2.35 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c880-CS3202025.11 | -2.02 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c880-SL12802025.11 | -2.02 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c880-RN3202025.11 | -1.82 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c880-RN25602025.11 | -1.82 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c880-SL12802025.11 | -1.41 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c880-CS12802025.11 | -1.36 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c880-CS3202025.11 | -1.35 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c880-RN3202025.11 | -1.32 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c880-CS3202025.11 | -1.16 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c880-SL25602025.11 | -1.14 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c880-CS25602025.11 | -1.08 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c880-SL3202025.11 | -0.86 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c880-CS6402025.11 | -0.76 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c880-RN3202025.11 | -0.75 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c880-RN6402025.11 | -0.63 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c880-RN6402025.11 | -0.63 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c880-SL6402025.11 | -0.63 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c880-CS3202025.11 | -0.61 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c880-CS25602025.11 | -0.52 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c880-CS6402025.11 | -0.48 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c880-RN6402025.11 | -0.39 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c880-RN6402025.11 | -0.24 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c880-CS6402025.11 | -0.19 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c880-RN3202025.11 | -0.13 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c880-RN12802025.11 | 0 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c880-SL3202025.11 | 0.31 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c880-SL6402025.11 | 0.43 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c880-SL6402025.11 | 0.53 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c880-RN12802025.11 | 0.54 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c880-CS3202025.11 | 0.67 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c880-RN12802025.11 | 0.68 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c880-CS3202025.11 | 0.74 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c880-RN12802025.11 | 0.81 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c880-CS12802025.11 | 0.89 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c880-SL3202025.11 | 1.11 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c880-CS12802025.11 | 1.23 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c880-CS25602025.11 | 1.23 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c880-RN25602025.11 | 1.29 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c880-CS6402025.11 | 1.38 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c880-CS12802025.11 | 2.22 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c880-CS6402025.11 | 2.29 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c880-RN25602025.11 | 2.4 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c880-SL6402025.11 | 2.55 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c880-SL6402025.11 | 3.42 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c880-SL6402025.11 | 3.66 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c880-SL25602025.11 | 3.67 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c880-CS25602025.11 | 3.99 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c880-RN12802025.11 | 4.22 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c880-RN25602025.11 | 6.11 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c880-SL25602025.11 | 6.11 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c432-CS12802025.11 | 8.29 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c432-RN12802025.11 | 8.86 | |
| AttackGNNCircuit Case=c880-RN25602025.11 | 9.31 | |
| AttackGNNCircuit Case=c880-SL25602025.11 | 9.93 | |
| AttackGNNCircuit Case=c880-RN6402025.11 | 10.04 | |
| AttackGNNCircuit Case=c880-RN12802025.11 | 10.13 | |
| AttackGNNCircuit Case=c880-CS25602025.11 | 10.58 | |
| AttackGNNCircuit Case=c880-CS12802025.11 | 11.08 | |
| AttackGNNCircuit Case=c880-SL12802025.11 | 11.2 | |
| AttackGNNCircuit Case=c880-CS6402025.11 | 11.35 | |
| AttackGNNCircuit Case=c880-RN3202025.11 | 12.37 | |
| AttackGNNCircuit Case=c880-CS3202025.11 | 12.75 | |
| AttackGNNCircuit Case=c880-SL3202025.11 | 13.39 | |
| AttackGNNCircuit Case=c880-SL6402025.11 | 14.15 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c432-CS6402025.11 | 16.02 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c432-BE2802025.11 | 16.23 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c432-RN3202025.11 | 20.68 | |
| NetDeToxBackend Model=Gemini-2.5 Flash, Circuit Case=c432-BE2802025.11 | 21.7 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c432-SL6402025.11 | 22.43 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c432-CS3202025.11 | 25.31 | |
| NetDeToxBackend Model=LLaMA-4 Maverick 17B, Circuit Case=c432-RN3202025.11 | 25.6 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c432-BE2802025.11 | 27.25 | |
| NetDeToxBackend Model=GPT-5, Circuit Case=c432-BE2802025.11 | 27.35 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c499-CS12802025.11 | 27.71 | |
| NetDeToxBackend Model=GPT-4o-mini, Circuit Case=c432-BE2802025.11 | 32.51 | |
| NetDeToxBackend Model=Qwen-3 235B, Circuit Case=c432-BE2802025.11 | 33.64 | |
| NetDeToxBackend Model=Deepseek-V3, Circuit Case=c432-SL3202025.11 | 35.91 |