mlsanityData to 14 Oct 2026

ModelGiF: Gradient Fields for Model Functional Distance

arXiv 2309.11013 ↗First posted 20 Sep 2023cs.LG cs.AIcited by 5

Not on the map. Why?

Abstract (arXiv)

The last decade has witnessed the success of deep learning and the surge of publicly released trained models, which necessitates the quantification of the model functional distance for various purposes. However, quantifying the model functional distance is always challenging due to the opacity in inner workings and the heterogeneity in architectures or tasks. Inspired by the concept of "field" in physics, in this work we introduce Model Gradient Field (abbr. ModelGiF) to extract homogeneous representations from the heterogeneous pre-trained models. Our main assumption underlying ModelGiF is that each pre-trained deep model uniquely determines a ModelGiF over the input space. The distance between models can thus be measured by the similarity between their ModelGiFs. We validate the effectiveness of the proposed ModelGiF with a suite of testbeds, including task relatedness estimation, intellectual property protection, and model unlearning verification. Experimental results demonstrate the versatility of the proposed ModelGiF on these tasks, with significantly superiority performance to state-of-the-art competitors. Codes are available at https://github.com/zju-vipa/modelgif.

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 41 of its 56 references that are in the map. First posted on arXiv 20 Sep 2023.

Builds on

41 of 56 references.

References · 41

  1. 2015Deep Residual Learning for Image Recognitioncited by 52,096
  2. 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
  3. 2015Distilling the Knowledge in a Neural Networkcited by 10,324
  4. 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,639
  5. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  6. 2016Densely Connected Convolutional Networkscited by 6,720
  7. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  8. 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
  9. 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,795
  10. 2017Axiomatic Attribution for Deep Networkscited by 3,384
  11. 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,884
  12. 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
29 more
  1. 2017Rethinking Atrous Convolution for Semantic Image Segmentationcited by 2,161
  2. 2018Continual Lifelong Learning with Neural Networks: A Reviewcited by 1,330
  3. 2014How transferable are features in deep neural networks?cited by 1,225
  4. 2019Machine Unlearningcited by 1,061
  5. 2018Taskonomy: Disentangling Task Transfer Learningcited by 634
  6. 2016Stealing Machine Learning Models via Prediction APIscited by 619
  7. 2018Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networkscited by 580
  8. 2019Importance Estimation for Neural Network Pruningcited by 541
  9. 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 357
  10. 2020Amnesiac Machine Learningcited by 319
  11. 2014CNN Features off-the-shelf: an Astounding Baseline for Recognitioncited by 316
  12. 2016Not Just a Black Box: Learning Important Features Through Propagating Activation Differencescited by 297
  13. 2018Knockoff Nets: Stealing Functionality of Black-Box Modelscited by 292
  14. 2017Embedding Watermarks into Deep Neural Networkscited by 248
  15. 2019High Accuracy and High Fidelity Extraction of Neural Networkscited by 214
  16. 2019Task2Vec: Task Embedding for Meta-Learningcited by 205
  17. 2018PRADA: Protecting against DNN Model Stealing Attackscited by 165
  18. 2020Entangled Watermarks as a Defense against Model Extractioncited by 149
  19. 2019Deep Neural Network Fingerprinting by Conferrable Adversarial Examplescited by 93
  20. 2019[Extended version] Rethinking Deep Neural Network Ownership Verification: Embedding Passports to Defeat Ambiguity Attackscited by 88
  21. 2019Representation Similarity Analysis for Efficient Task taxonomy & Transfer Learningcited by 86
  22. 2021Proof-of-Learning: Definitions and Practicecited by 84
  23. 2022An Information-Theoretic Approach to Transferability in Task Transfer Learningcited by 81
  24. 2019IPGuard: Protecting Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundarycited by 70
  25. 2021Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Modelscited by 46
  26. 2021ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detectioncited by 33
  27. 2019Deep Model Transferability from Attribution Mapscited by 28
  28. 2022Are You Stealing My Model? Sample Correlation for Fingerprinting Deep Neural Networkscited by 21
  29. 2020DEPARA: Deep Attribution Graph for Deep Knowledge Transferabilitycited by 18

Built on by

Cited by year

Citing papers per year: 2024: 3; 2025: 2.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2022FIT: A Metric for Model Sensitivity
  2. 2026Model Specific Task Similarity for Vision Language Model Selection via Layer Conductance
  3. 2024Identifying Sub-networks in Neural Networks via Functionally Similar Representations
  4. 2024Stepping Forward on the Last Mile
  5. 2026PhysFieldBench: Can Multimodal Models Understand Physical Fields?
  6. 2026Pre-Training for Simulation-Based Science: A Study on Jet Foundation Model Training Objectives
  7. 2021Search Spaces for Neural Model Training
  8. 2024MLP-KAN: Unifying Deep Representation and Function Learning