Characteristic Examples: High-Robustness, Low-Transferability Fingerprinting of Neural Networks

Characteristic Examples: High-Robustness, Low-Transferability Fingerprinting of Neural Networks

Siyue Wang, Xiao Wang, Pin-Yu Chen, Pu Zhao, Xue Lin

Proceedings of the Thirtieth International Joint Conference on Artificial Intelligence
Main Track. Pages 575-582. https://doi.org/10.24963/ijcai.2021/80

This paper proposes Characteristic Examples for effectively fingerprinting deep neural networks, featuring high-robustness to the base model against model pruning as well as low-transferability to unassociated models. This is the first work taking both robustness and transferability into consideration for generating realistic fingerprints, whereas current methods lack practical assumptions and may incur large false positive rates. To achieve better trade-off between robustness and transferability, we propose three kinds of characteristic examples: vanilla C-examples, RC-examples, and LTRC-example, to derive fingerprints from the original base model. To fairly characterize the trade-off between robustness and transferability, we propose Uniqueness Score, a comprehensive metric that measures the difference between robustness and transferability, which also serves as an indicator to the false alarm problem. Extensive experiments demonstrate that the proposed characteristic examples can achieve superior performance when compared with existing fingerprinting methods. In particular, for VGG ImageNet models, using LTRC-examples gives 4X higher uniqueness score than the baseline method and does not incur any false positives.
Keywords:
AI Ethics, Trust, Fairness: AI and Law, Governance, Regulation
Multidisciplinary Topics and Applications: Security and Privacy
Multidisciplinary Topics and Applications: Validation and Verification