Malicious Model Detection on 334 ML models Prior work threat model
0False Positives CountRE-MOAT
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| RE-MOAT2026.06 | 0 | 21 | 0 | 26.2 | |
| MODELTRACER2026.06 | 1 | 38 | 0.4 | 47.5 | |
| MODELSCAN2026.06 | 16 | 7 | 6.3 | 8.8 | |
| PICKLEBALL2026.06 | 52 | 0 | 20.5 | 0 | |
| weights_only2026.06 | 96 | 0 | 37.8 | 0 | |
| Fickling2026.06 | 96 | 0 | 37.8 | 0 |