Model Fingerprinting on Fashion-MNIST
99.2AUCIrisFP
Evaluation Results
| Method | Links | |
|---|---|---|
| IrisFPModification Attack=PR, Backbone=ResNet-182026.03 | 99.2 | |
| IPGuardModification Attack=PR, Backbone=ResNet-182026.03 | 99 | |
| ADV-TRAModification Attack=PR, Backbone=ResNet-182026.03 | 99 | |
| AKHModification Attack=PR, Backbone=ResNet-182026.03 | 99 | |
| IrisFPModification Attack=NFT, Backbone=ResNet-182026.03 | 98.3 | |
| IrisFPModification Attack=FT, Backbone=ResNet-182026.03 | 98.2 | |
| IrisFPModification Attack=PFT, Backbone=ResNet-182026.03 | 98.2 | |
| ADV-TRAModification Attack=PFT, Backbone=ResNet-182026.03 | 98.1 | |
| ADV-TRAModification Attack=FT, Backbone=ResNet-182026.03 | 98 | |
| ADV-TRAModification Attack=NFT, Backbone=ResNet-182026.03 | 98 | |
| IrisFPProtected Model=MobileNet-V22026.03 | 96.3 | |
| IrisFPProtected Model=ResNet-182026.03 | 94 | |
| UAPModification Attack=PR, Backbone=ResNet-182026.03 | 86.9 | |
| AKHModification Attack=FT, Backbone=ResNet-182026.03 | 85.5 | |
| IrisFPModification Attack=KD, Backbone=ResNet-182026.03 | 85.3 | |
| ADV-TRAProtected Model=ResNet-182026.03 | 84.5 | |
| AKHModification Attack=KD, Backbone=ResNet-182026.03 | 84.4 | |
| ADV-TRAModification Attack=KD, Backbone=ResNet-182026.03 | 83 | |
| IrisFPModification Attack=AT, Backbone=ResNet-182026.03 | 81.6 | |
| UAPProtected Model=MobileNet-V22026.03 | 81.6 | |
| UAPModification Attack=FT, Backbone=ResNet-182026.03 | 80.9 | |
| UAPModification Attack=PFT, Backbone=ResNet-182026.03 | 79.7 | |
| AKHProtected Model=MobileNet-V22026.03 | 79.7 | |
| ADV-TRAProtected Model=MobileNet-V22026.03 | 78.2 | |
| UAPModification Attack=NFT, Backbone=ResNet-182026.03 | 78.1 | |
| AKHProtected Model=ResNet-182026.03 | 76.5 | |
| AKHModification Attack=PFT, Backbone=ResNet-182026.03 | 75.9 | |
| UAPModification Attack=KD, Backbone=ResNet-182026.03 | 74.9 | |
| AKHModification Attack=NFT, Backbone=ResNet-182026.03 | 73.7 | |
| IPGuardProtected Model=ResNet-182026.03 | 72.1 | |
| UAPProtected Model=ResNet-182026.03 | 72.1 | |
| UAPModification Attack=AT, Backbone=ResNet-182026.03 | 71.6 | |
| IPGuardModification Attack=FT, Backbone=ResNet-182026.03 | 68.8 | |
| IPGuardModification Attack=NFT, Backbone=ResNet-182026.03 | 63.6 | |
| IPGuardModification Attack=PFT, Backbone=ResNet-182026.03 | 63.2 | |
| IPGuardModification Attack=AT, Backbone=ResNet-182026.03 | 61.2 | |
| IPGuardProtected Model=MobileNet-V22026.03 | 60.7 | |
| IPGuardModification Attack=KD, Backbone=ResNet-182026.03 | 59.2 | |
| AKHModification Attack=AT, Backbone=ResNet-182026.03 | 20.3 | |
| ADV-TRAModification Attack=AT, Backbone=ResNet-182026.03 | 15.8 |