Model Fingerprinting Robustness on MNIST
1AUC (Pruning)AnaFP
Evaluation results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| AnaFPModel Architecture=MLP2026.03 | 1 | 1 | 0.792 | 0.987 | 1 | 0.999 | 0.788 | |
| UAPModel Architecture=MLP2026.03 | 0.981 | 0.969 | 0.635 | 0.931 | 0.968 | 0.976 | 0.61 | |
| GMFIPModel Architecture=MLP2026.03 | 0.978 | 0.971 | 0.696 | 0.914 | 0.945 | 0.873 | 0.651 | |
| ADV-TRAModel Architecture=MLP2026.03 | 0.971 | 0.964 | 0.596 | 0.907 | 0.922 | 0.953 | 0.602 | |
| IPGuardModel Architecture=MLP2026.03 | 0.924 | 0.983 | 0.535 | 0.902 | 0.938 | 0.922 | 0.517 | |
| AKHModel Architecture=MLP2026.03 | 0.849 | 0.87 | 0.765 | 0.897 | 0.864 | 0.777 | 0.759 | |
| MarginFingerModel Architecture=MLP2026.03 | 0.708 | 0.75 | 0.572 | 0.762 | 0.759 | 0.586 | 0.57 |