Model Fingerprinting on CIFAR-10 (AUC)
95.7AUCAnaFP
Evaluation Results
| Method | Links | |
|---|---|---|
| AnaFPModel Architecture=CNN2026.03 | 95.7 | |
| ADV-TRAModel Architecture=CNN2026.03 | 87.8 | |
| UAPModel Architecture=CNN2026.03 | 85 | |
| GMFIPModel Architecture=CNN2026.03 | 81.4 | |
| AKHModel Architecture=CNN2026.03 | 72.3 | |
| IPGuardModel Architecture=CNN2026.03 | 71.5 | |
| MarginFingerModel Architecture=CNN2026.03 | 67.1 | |
| ADV-TRAModification Attack=FT, Backbone=ResNet-182026.03 | 1 | |
| ADV-TRAModification Attack=PR, Backbone=ResNet-182026.03 | 1 | |
| IrisFPModification Attack=PR, Backbone=ResNet-182026.03 | 1 | |
| UAPModification Attack=PR, Backbone=ResNet-182026.03 | 0.998 | |
| IPGuardModification Attack=PR, Backbone=ResNet-182026.03 | 0.997 | |
| IrisFPModification Attack=NFT, Backbone=ResNet-182026.03 | 0.968 | |
| IrisFPModification Attack=PFT, Backbone=ResNet-182026.03 | 0.965 | |
| ADV-TRAModification Attack=NFT, Backbone=ResNet-182026.03 | 0.962 | |
| ADV-TRAModification Attack=PFT, Backbone=ResNet-182026.03 | 0.959 | |
| IrisFPModification Attack=FT, Backbone=ResNet-182026.03 | 0.954 | |
| IrisFPProtected Model=MobileNet-V22026.03 | 0.936 | |
| IrisFPModification Attack=AT, Backbone=ResNet-182026.03 | 0.929 | |
| AKHModification Attack=FT, Backbone=ResNet-182026.03 | 0.921 | |
| IrisFPProtected Model=ResNet-182026.03 | 0.893 | |
| AKHModification Attack=PR, Backbone=ResNet-182026.03 | 0.876 | |
| UAPModification Attack=NFT, Backbone=ResNet-182026.03 | 0.868 | |
| AKHProtected Model=MobileNet-V22026.03 | 0.86 | |
| UAPModification Attack=PFT, Backbone=ResNet-182026.03 | 0.856 | |
| ADV-TRAProtected Model=MobileNet-V22026.03 | 0.824 | |
| IPGuardProtected Model=MobileNet-V22026.03 | 0.821 | |
| UAPModification Attack=FT, Backbone=ResNet-182026.03 | 0.809 | |
| ADV-TRAModification Attack=KD, Backbone=ResNet-182026.03 | 0.805 | |
| ADV-TRAProtected Model=ResNet-182026.03 | 0.799 | |
| UAPProtected Model=MobileNet-V22026.03 | 0.749 | |
| AKHModification Attack=NFT, Backbone=ResNet-182026.03 | 0.733 | |
| UAPProtected Model=ResNet-182026.03 | 0.732 | |
| IPGuardModification Attack=NFT, Backbone=ResNet-182026.03 | 0.724 | |
| UAPModification Attack=KD, Backbone=ResNet-182026.03 | 0.722 | |
| AKHProtected Model=ResNet-182026.03 | 0.71 | |
| AKHModification Attack=PFT, Backbone=ResNet-182026.03 | 0.701 | |
| IPGuardModification Attack=PFT, Backbone=ResNet-182026.03 | 0.687 | |
| IPGuardProtected Model=ResNet-182026.03 | 0.675 | |
| IPGuardModification Attack=FT, Backbone=ResNet-182026.03 | 0.656 | |
| AKHModification Attack=KD, Backbone=ResNet-182026.03 | 0.621 | |
| IrisFPModification Attack=KD, Backbone=ResNet-182026.03 | 0.616 | |
| AKHModification Attack=AT, Backbone=ResNet-182026.03 | 0.531 | |
| IPGuardModification Attack=KD, Backbone=ResNet-182026.03 | 0.515 | |
| IPGuardModification Attack=AT, Backbone=ResNet-182026.03 | 0.511 | |
| UAPModification Attack=AT, Backbone=ResNet-182026.03 | 0.346 | |
| ADV-TRAModification Attack=AT, Backbone=ResNet-182026.03 | 0.025 |