Model Fingerprinting on CIFAR-100
100AUCADV-TRA
Evaluation Results
| Method | Links | |
|---|---|---|
| ADV-TRAModification Attack=PR, Backbone=ResNet-182026.03 | 100 | |
| IrisFPModification Attack=PR, Backbone=ResNet-182026.03 | 100 | |
| IPGuardModification Attack=PR, Backbone=ResNet-182026.03 | 99.8 | |
| IrisFPModification Attack=FT, Backbone=ResNet-182026.03 | 95.3 | |
| IrisFPProtected Model=MobileNet-V22026.03 | 93.7 | |
| LiteGuardModel Type=CNN2026.03 | 93.6 | |
| IrisFPModification Attack=PFT, Backbone=ResNet-182026.03 | 93.3 | |
| IrisFPModification Attack=NFT, Backbone=ResNet-182026.03 | 92.8 | |
| IrisFPModification Attack=KD, Backbone=ResNet-182026.03 | 92.7 | |
| IrisFPProtected Model=ResNet-182026.03 | 91.6 | |
| UAPModification Attack=PR, Backbone=ResNet-182026.03 | 90 | |
| ADV-TRAModification Attack=KD, Backbone=ResNet-182026.03 | 89.9 | |
| AnaFPModel Architecture=CNN2026.03 | 89.3 | |
| AKHProtected Model=MobileNet-V22026.03 | 86.7 | |
| ADV-TRAModification Attack=PFT, Backbone=ResNet-182026.03 | 86.4 | |
| ADV-TRAModification Attack=FT, Backbone=ResNet-182026.03 | 86.3 | |
| ADV-TRAModification Attack=NFT, Backbone=ResNet-182026.03 | 86.3 | |
| AKHModification Attack=KD, Backbone=ResNet-182026.03 | 85.8 | |
| ADV-TRAModel Architecture=CNN2026.03 | 85 | |
| ADVTRAModel Type=CNN2026.03 | 84.5 | |
| UAPProtected Model=MobileNet-V22026.03 | 83.6 | |
| IPGuardProtected Model=MobileNet-V22026.03 | 82.3 | |
| AKHModification Attack=FT, Backbone=ResNet-182026.03 | 81.3 | |
| UAPModel Architecture=CNN2026.03 | 80.6 | |
| ADV-TRAProtected Model=ResNet-182026.03 | 80.6 | |
| AKHModel Architecture=CNN2026.03 | 80.2 | |
| ADV-TRAProtected Model=MobileNet-V22026.03 | 79.5 | |
| AKHProtected Model=ResNet-182026.03 | 78.5 | |
| GMFIPModel Architecture=CNN2026.03 | 78.1 | |
| AKHModification Attack=NFT, Backbone=ResNet-182026.03 | 77.5 | |
| UAPModification Attack=NFT, Backbone=ResNet-182026.03 | 77 | |
| UAPModification Attack=FT, Backbone=ResNet-182026.03 | 76.4 | |
| UAPProtected Model=ResNet-182026.03 | 76.1 | |
| IrisFPModification Attack=AT, Backbone=ResNet-182026.03 | 75.8 | |
| UAPModel Type=CNN2026.03 | 75.2 | |
| UAPModification Attack=PFT, Backbone=ResNet-182026.03 | 75.2 | |
| IPGuardModel Architecture=CNN2026.03 | 72.5 | |
| UAPModification Attack=KD, Backbone=ResNet-182026.03 | 70.9 | |
| IPGuardModel Type=CNN2026.03 | 70.8 | |
| UAPModification Attack=AT, Backbone=ResNet-182026.03 | 67.7 | |
| MetaVModel Type=CNN2026.03 | 67.6 | |
| AKHModification Attack=PFT, Backbone=ResNet-182026.03 | 67.1 | |
| AKHModification Attack=PR, Backbone=ResNet-182026.03 | 67 | |
| IPGuardProtected Model=ResNet-182026.03 | 65.4 | |
| MarginFingerModel Architecture=CNN2026.03 | 63 | |
| IPGuardModification Attack=AT, Backbone=ResNet-182026.03 | 62.1 | |
| IPGuardModification Attack=FT, Backbone=ResNet-182026.03 | 61.7 | |
| IPGuardModification Attack=KD, Backbone=ResNet-182026.03 | 59.3 | |
| IPGuardModification Attack=NFT, Backbone=ResNet-182026.03 | 58.4 | |
| IPGuardModification Attack=PFT, Backbone=ResNet-182026.03 | 57.6 | |
| ADV-TRAModification Attack=AT, Backbone=ResNet-182026.03 | 33.8 | |
| AKHModification Attack=AT, Backbone=ResNet-182026.03 | 22.1 |