Ownership Verification on CIFAR-10 (AUC)
100AUCAnaFP
Evaluation Results
| Method | Links | |
|---|---|---|
| AnaFPModification Attack=Pruning, Model Architecture=CNN2026.03 | 100 | |
| UAPModification Attack=Pruning, Model Architecture=CNN2026.03 | 100 | |
| MarginFingerModification Attack=Pruning, Model Architecture=CNN2026.03 | 100 | |
| ADV-TRAModification Attack=Pruning, Model Architecture=CNN2026.03 | 100 | |
| IPGuardModification Attack=Pruning, Model Architecture=CNN2026.03 | 99.9 | |
| AKHModification Attack=Pruning, Model Architecture=CNN2026.03 | 99.9 | |
| GMFIPModification Attack=Pruning, Model Architecture=CNN2026.03 | 99.9 | |
| AnaFPModification Attack=P-finetune, Model Architecture=CNN2026.03 | 98.9 | |
| AnaFPModification Attack=AT, Model Architecture=CNN2026.03 | 98.3 | |
| AnaFPModification Attack=Fine-tuning, Model Architecture=CNN2026.03 | 97.9 | |
| AnaFPModification Attack=N-finetune, Model Architecture=CNN2026.03 | 97.8 | |
| ADV-TRAModification Attack=Fine-tuning, Model Architecture=CNN2026.03 | 92.3 | |
| ADV-TRAModification Attack=N-finetune, Model Architecture=CNN2026.03 | 89.5 | |
| UAPModification Attack=P-finetune, Model Architecture=CNN2026.03 | 87.6 | |
| UAPModification Attack=N-finetune, Model Architecture=CNN2026.03 | 87 | |
| UAPModification Attack=Fine-tuning, Model Architecture=CNN2026.03 | 86.8 | |
| GMFIPModification Attack=N-finetune, Model Architecture=CNN2026.03 | 85.8 | |
| ADV-TRAModification Attack=P-finetune, Model Architecture=CNN2026.03 | 85.7 | |
| AKHModification Attack=Fine-tuning, Model Architecture=CNN2026.03 | 84.8 | |
| GMFIPModification Attack=P-finetune, Model Architecture=CNN2026.03 | 81.9 | |
| UAPModification Attack=AT, Model Architecture=CNN2026.03 | 78.3 | |
| GMFIPModification Attack=Fine-tuning, Model Architecture=CNN2026.03 | 77.9 | |
| AnaFPModification Attack=KD, Model Architecture=CNN2026.03 | 75.6 | |
| ADV-TRAModification Attack=AT, Model Architecture=CNN2026.03 | 74.2 | |
| IPGuardModification Attack=Fine-tuning, Model Architecture=CNN2026.03 | 74.1 | |
| AKHModification Attack=N-finetune, Model Architecture=CNN2026.03 | 71.6 | |
| GMFIPModification Attack=AT, Model Architecture=CNN2026.03 | 71.1 | |
| AKHModification Attack=P-finetune, Model Architecture=CNN2026.03 | 70.1 | |
| AnaFPModification Attack=Prune-KD, Model Architecture=CNN2026.03 | 68.9 | |
| UAPModification Attack=KD, Model Architecture=CNN2026.03 | 67.9 | |
| IPGuardModification Attack=N-finetune, Model Architecture=CNN2026.03 | 67.9 | |
| MarginFingerModification Attack=AT, Model Architecture=CNN2026.03 | 67.2 | |
| IPGuardModification Attack=P-finetune, Model Architecture=CNN2026.03 | 67.1 | |
| ADV-TRAModification Attack=KD, Model Architecture=CNN2026.03 | 66 | |
| MarginFingerModification Attack=Fine-tuning, Model Architecture=CNN2026.03 | 65.8 | |
| MarginFingerModification Attack=P-finetune, Model Architecture=CNN2026.03 | 63.8 | |
| AKHModification Attack=Prune-KD, Model Architecture=CNN2026.03 | 63.6 | |
| ADV-TRAModification Attack=Prune-KD, Model Architecture=CNN2026.03 | 63.3 | |
| AKHModification Attack=AT, Model Architecture=CNN2026.03 | 62.7 | |
| UAPModification Attack=Prune-KD, Model Architecture=CNN2026.03 | 62.5 | |
| IPGuardModification Attack=AT, Model Architecture=CNN2026.03 | 61.6 | |
| AKHModification Attack=KD, Model Architecture=CNN2026.03 | 61.6 | |
| GMFIPModification Attack=Prune-KD, Model Architecture=CNN2026.03 | 60.1 | |
| IPGuardModification Attack=Prune-KD, Model Architecture=CNN2026.03 | 59.6 | |
| GMFIPModification Attack=KD, Model Architecture=CNN2026.03 | 59.1 | |
| MarginFingerModification Attack=N-finetune, Model Architecture=CNN2026.03 | 58.6 | |
| IPGuardModification Attack=KD, Model Architecture=CNN2026.03 | 55.9 | |
| MarginFingerModification Attack=KD, Model Architecture=CNN2026.03 | 55.4 | |
| MarginFingerModification Attack=Prune-KD, Model Architecture=CNN2026.03 | 54.3 |