High-Robustness, Low-Transferability Fingerprinting of Neural Networks
Not on the map. Why?
Abstract (arXiv)
This paper proposes Characteristic Examples for effectively fingerprinting deep neural networks, featuring high-robustness to the base model against model pruning as well as low-transferability to unassociated models. This is the first work taking both robustness and transferability into consideration for generating realistic fingerprints, whereas current methods lack practical assumptions and may incur large false positive rates. To achieve better trade-off between robustness and transferability, we propose three kinds of characteristic examples: vanilla C-examples, RC-examples, and LTRC-example, to derive fingerprints from the original base model. To fairly characterize the trade-off between robustness and transferability, we propose Uniqueness Score, a comprehensive metric that measures the difference between robustness and transferability, which also serves as an indicator to the false alarm problem.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 18 of its 33 references that are in the map. First posted on arXiv 14 May 2021.
Builds on
18 of 33 references.
References · 18
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2015Learning both Weights and Connections for Efficient Neural Networkscited by 2,031
- 2016Adversarial examples in the physical worldcited by 1,769
- 2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,268
- 2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,106
- 2016Adversarial Machine Learning at Scalecited by 936
- 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 357
- 2017Embedding Watermarks into Deep Neural Networkscited by 248
- 2019Improving Black-box Adversarial Attacks with a Transfer-based Priorcited by 121
- 2017Adversarial Frontier Stitching for Remote Neural Network Watermarkingcited by 118
6 more
- 2019Deep Neural Network Fingerprinting by Conferrable Adversarial Examplescited by 93
- 2019[Extended version] Rethinking Deep Neural Network Ownership Verification: Embedding Passports to Defeat Ambiguity Attackscited by 88
- 2018Low Frequency Adversarial Perturbationcited by 80
- 2019On the Effectiveness of Low Frequency Perturbationscited by 56
- 2019Robust Watermarking of Neural Network with Exponential Weightingcited by 51
- 2019Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defensescited by 8
Built on by
Citing papers per year: 2025: 1.
1 paper.