Model Fingerprinting on MNIST (AUC)
0.985AUCIrisFP
Evaluation Results
| Method | Links | |
|---|---|---|
| IrisFPModification Attack=FT, Backbone=ResNet-182026.03 | 0.985 | |
| IrisFPModification Attack=NFT, Backbone=ResNet-182026.03 | 0.985 | |
| IrisFPModification Attack=PFT, Backbone=ResNet-182026.03 | 0.983 | |
| AKHModification Attack=FT, Backbone=ResNet-182026.03 | 0.98 | |
| ADV-TRAModification Attack=NFT, Backbone=ResNet-182026.03 | 0.976 | |
| ADV-TRAModification Attack=PFT, Backbone=ResNet-182026.03 | 0.975 | |
| UAPModification Attack=FT, Backbone=ResNet-182026.03 | 0.966 | |
| IrisFPModification Attack=PR, Backbone=ResNet-182026.03 | 0.966 | |
| ADV-TRAModification Attack=FT, Backbone=ResNet-182026.03 | 0.965 | |
| AnaFPModel Architecture=MLP2026.03 | 0.963 | |
| UAPModification Attack=NFT, Backbone=ResNet-182026.03 | 0.959 | |
| UAPModification Attack=AT, Backbone=ResNet-182026.03 | 0.946 | |
| AKHModification Attack=NFT, Backbone=ResNet-182026.03 | 0.92 | |
| AKHModification Attack=PFT, Backbone=ResNet-182026.03 | 0.915 | |
| UAPModel Architecture=MLP2026.03 | 0.906 | |
| GMFIPModel Architecture=MLP2026.03 | 0.892 | |
| UAPModification Attack=PFT, Backbone=ResNet-182026.03 | 0.892 | |
| ADV-TRAModel Architecture=MLP2026.03 | 0.887 | |
| IrisFPProtected Model=MobileNet-V22026.03 | 0.876 | |
| IPGuardModel Architecture=MLP2026.03 | 0.873 | |
| IrisFPProtected Model=ResNet-182026.03 | 0.854 | |
| AKHModel Architecture=MLP2026.03 | 0.851 | |
| AKHModification Attack=AT, Backbone=ResNet-182026.03 | 0.837 | |
| AKHProtected Model=ResNet-182026.03 | 0.82 | |
| AKHProtected Model=MobileNet-V22026.03 | 0.805 | |
| AKHModification Attack=PR, Backbone=ResNet-182026.03 | 0.797 | |
| UAPProtected Model=ResNet-182026.03 | 0.789 | |
| ADV-TRAModification Attack=PR, Backbone=ResNet-182026.03 | 0.753 | |
| ADV-TRAProtected Model=ResNet-182026.03 | 0.753 | |
| AKHModification Attack=KD, Backbone=ResNet-182026.03 | 0.745 | |
| UAPProtected Model=MobileNet-V22026.03 | 0.743 | |
| IPGuardModification Attack=PR, Backbone=ResNet-182026.03 | 0.733 | |
| ADV-TRAProtected Model=MobileNet-V22026.03 | 0.72 | |
| IrisFPModification Attack=AT, Backbone=ResNet-182026.03 | 0.704 | |
| MarginFingerModel Architecture=MLP2026.03 | 0.653 | |
| IPGuardProtected Model=MobileNet-V22026.03 | 0.634 | |
| UAPModification Attack=PR, Backbone=ResNet-182026.03 | 0.63 | |
| IPGuardModification Attack=KD, Backbone=ResNet-182026.03 | 0.624 | |
| ADV-TRAModification Attack=KD, Backbone=ResNet-182026.03 | 0.485 | |
| ADV-TRAModification Attack=AT, Backbone=ResNet-182026.03 | 0.475 | |
| IPGuardProtected Model=ResNet-182026.03 | 0.471 | |
| IrisFPModification Attack=KD, Backbone=ResNet-182026.03 | 0.467 | |
| IPGuardModification Attack=NFT, Backbone=ResNet-182026.03 | 0.456 | |
| UAPModification Attack=KD, Backbone=ResNet-182026.03 | 0.455 | |
| IPGuardModification Attack=PFT, Backbone=ResNet-182026.03 | 0.432 | |
| IPGuardModification Attack=FT, Backbone=ResNet-182026.03 | 0.378 | |
| IPGuardModification Attack=AT, Backbone=ResNet-182026.03 | 0.067 |