ModelGiF: Gradient Fields for Model Functional Distance
Not on the map. Why?
Abstract (arXiv)
The last decade has witnessed the success of deep learning and the surge of publicly released trained models, which necessitates the quantification of the model functional distance for various purposes. However, quantifying the model functional distance is always challenging due to the opacity in inner workings and the heterogeneity in architectures or tasks. Inspired by the concept of "field" in physics, in this work we introduce Model Gradient Field (abbr. ModelGiF) to extract homogeneous representations from the heterogeneous pre-trained models. Our main assumption underlying ModelGiF is that each pre-trained deep model uniquely determines a ModelGiF over the input space. The distance between models can thus be measured by the similarity between their ModelGiFs. We validate the effectiveness of the proposed ModelGiF with a suite of testbeds, including task relatedness estimation, intellectual property protection, and model unlearning verification. Experimental results demonstrate the versatility of the proposed ModelGiF on these tasks, with significantly superiority performance to state-of-the-art competitors. Codes are available at https://github.com/zju-vipa/modelgif.
Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 41 of its 56 references that are in the map. First posted on arXiv 20 Sep 2023.
Builds on
41 of 56 references.
References · 41
- 2015Deep Residual Learning for Image Recognitioncited by 52,096
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,364
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2015Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networkscited by 9,639
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2016Densely Connected Convolutional Networkscited by 6,720
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,070
- 2018MobileNetV2: Inverted Residuals and Linear Bottleneckscited by 4,795
- 2017Axiomatic Attribution for Deep Networkscited by 3,384
- 2019CutMix: Regularization Strategy to Train Strong Classifiers with Localizable Featurescited by 2,884
- 2013Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Mapscited by 2,371
29 more
- 2017Rethinking Atrous Convolution for Semantic Image Segmentationcited by 2,161
- 2018Continual Lifelong Learning with Neural Networks: A Reviewcited by 1,330
- 2014How transferable are features in deep neural networks?cited by 1,225
- 2019Machine Unlearningcited by 1,061
- 2018Taskonomy: Disentangling Task Transfer Learningcited by 634
- 2016Stealing Machine Learning Models via Prediction APIscited by 619
- 2018Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networkscited by 580
- 2019Importance Estimation for Neural Network Pruningcited by 541
- 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 357
- 2020Amnesiac Machine Learningcited by 319
- 2014CNN Features off-the-shelf: an Astounding Baseline for Recognitioncited by 316
- 2016Not Just a Black Box: Learning Important Features Through Propagating Activation Differencescited by 297
- 2018Knockoff Nets: Stealing Functionality of Black-Box Modelscited by 292
- 2017Embedding Watermarks into Deep Neural Networkscited by 248
- 2019High Accuracy and High Fidelity Extraction of Neural Networkscited by 214
- 2019Task2Vec: Task Embedding for Meta-Learningcited by 205
- 2018PRADA: Protecting against DNN Model Stealing Attackscited by 165
- 2020Entangled Watermarks as a Defense against Model Extractioncited by 149
- 2019Deep Neural Network Fingerprinting by Conferrable Adversarial Examplescited by 93
- 2019[Extended version] Rethinking Deep Neural Network Ownership Verification: Embedding Passports to Defeat Ambiguity Attackscited by 88
- 2019Representation Similarity Analysis for Efficient Task taxonomy & Transfer Learningcited by 86
- 2021Proof-of-Learning: Definitions and Practicecited by 84
- 2022An Information-Theoretic Approach to Transferability in Task Transfer Learningcited by 81
- 2019IPGuard: Protecting Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundarycited by 70
- 2021Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Modelscited by 46
- 2021ModelDiff: Testing-Based DNN Similarity Comparison for Model Reuse Detectioncited by 33
- 2019Deep Model Transferability from Attribution Mapscited by 28
- 2022Are You Stealing My Model? Sample Correlation for Fingerprinting Deep Neural Networkscited by 21
- 2020DEPARA: Deep Attribution Graph for Deep Knowledge Transferabilitycited by 18
Built on by
Citing papers per year: 2024: 3; 2025: 2.
5 papers.
- 2024Training-Free Pretrained Model Mergingcited by 32
- 2025FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprintcited by 10
- 2024ModelLock: Locking Your Model With a Spellcited by 6
- 2024Pre-Trained Model Recommendation for Downstream Fine-tuningcited by 1
- 2025FedDAF: Federated Domain Adaptation Using Model Functional Distancecited by 0
- 2025FedDAF: Federated Domain Adaptation Using Model Functional Distance15 Sep 2025
- 2025FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint26 Jan 2025
- 2024ModelLock: Locking Your Model With a Spell25 May 2024
- 2024Pre-Trained Model Recommendation for Downstream Fine-tuning11 Mar 2024
- 2024Training-Free Pretrained Model Merging4 Mar 2024
Similar, not cited
Close in wording, no citation either way
- 2022FIT: A Metric for Model Sensitivity
- 2026Model Specific Task Similarity for Vision Language Model Selection via Layer Conductance
- 2024Identifying Sub-networks in Neural Networks via Functionally Similar Representations
- 2024Stepping Forward on the Last Mile
- 2026PhysFieldBench: Can Multimodal Models Understand Physical Fields?
- 2026Pre-Training for Simulation-Based Science: A Study on Jet Foundation Model Training Objectives
- 2021Search Spaces for Neural Model Training
- 2024MLP-KAN: Unifying Deep Representation and Function Learning