Model Fingerprinting on Tiny-ImageNet
1AUCIrisFP
Evaluation Results
| Method | Links | |
|---|---|---|
| IrisFPModification Attack=PR, Backbone=ResNet-182026.03 | 1 | |
| IrisFPModification Attack=PFT, Backbone=ResNet-182026.03 | 0.992 | |
| AKHModification Attack=PFT, Backbone=ResNet-182026.03 | 0.988 | |
| IrisFPModification Attack=FT, Backbone=ResNet-182026.03 | 0.986 | |
| UAPModification Attack=PR, Backbone=ResNet-182026.03 | 0.981 | |
| ADV-TRAModification Attack=PFT, Backbone=ResNet-182026.03 | 0.98 | |
| IrisFPModification Attack=NFT, Backbone=ResNet-182026.03 | 0.977 | |
| ADV-TRAModification Attack=FT, Backbone=ResNet-182026.03 | 0.97 | |
| UAPModification Attack=PFT, Backbone=ResNet-182026.03 | 0.967 | |
| IPGuardModification Attack=FT, Backbone=ResNet-182026.03 | 0.958 | |
| IPGuardModification Attack=NFT, Backbone=ResNet-182026.03 | 0.954 | |
| UAPModification Attack=FT, Backbone=ResNet-182026.03 | 0.953 | |
| UAPModification Attack=NFT, Backbone=ResNet-182026.03 | 0.952 | |
| ADV-TRAModification Attack=NFT, Backbone=ResNet-182026.03 | 0.948 | |
| AKHModification Attack=NFT, Backbone=ResNet-182026.03 | 0.944 | |
| AKHModification Attack=FT, Backbone=ResNet-182026.03 | 0.937 | |
| IrisFPProtected Model=MobileNet-V22026.03 | 0.934 | |
| ADV-TRAModification Attack=PR, Backbone=ResNet-182026.03 | 0.917 | |
| IrisFPProtected Model=ViT-B/162026.03 | 0.887 | |
| ADV-TRAProtected Model=MobileNet-V22026.03 | 0.877 | |
| AKHModification Attack=PR, Backbone=ResNet-182026.03 | 0.875 | |
| IrisFPProtected Model=ResNet-182026.03 | 0.874 | |
| IPGuardModification Attack=PFT, Backbone=ResNet-182026.03 | 0.867 | |
| AKHProtected Model=MobileNet-V22026.03 | 0.863 | |
| ADV-TRAProtected Model=ViT-B/162026.03 | 0.832 | |
| AKHProtected Model=ResNet-182026.03 | 0.823 | |
| UAPProtected Model=ResNet-182026.03 | 0.812 | |
| UAPProtected Model=MobileNet-V22026.03 | 0.806 | |
| AKHProtected Model=ViT-B/162026.03 | 0.806 | |
| UAPProtected Model=ViT-B/162026.03 | 0.803 | |
| IPGuardProtected Model=ViT-B/162026.03 | 0.778 | |
| ADV-TRAProtected Model=ResNet-182026.03 | 0.767 | |
| IPGuardModification Attack=PR, Backbone=ResNet-182026.03 | 0.754 | |
| IPGuardProtected Model=ResNet-182026.03 | 0.726 | |
| IPGuardProtected Model=MobileNet-V22026.03 | 0.692 | |
| IrisFPModification Attack=KD, Backbone=ResNet-182026.03 | 0.661 | |
| IrisFPModification Attack=AT, Backbone=ResNet-182026.03 | 0.545 | |
| IPGuardModification Attack=KD, Backbone=ResNet-182026.03 | 0.525 | |
| AKHModification Attack=AT, Backbone=ResNet-182026.03 | 0.488 | |
| ADV-TRAModification Attack=KD, Backbone=ResNet-182026.03 | 0.466 | |
| UAPModification Attack=KD, Backbone=ResNet-182026.03 | 0.455 | |
| UAPModification Attack=AT, Backbone=ResNet-182026.03 | 0.411 | |
| AKHModification Attack=KD, Backbone=ResNet-182026.03 | 0.326 | |
| IPGuardModification Attack=AT, Backbone=ResNet-182026.03 | 0.316 | |
| ADV-TRAModification Attack=AT, Backbone=ResNet-182026.03 | 0.173 |