Model Fingerprinting
A provenance technique that extracts inherent behavioral characteristics of a model for identification purposes. Carefully constructed fingerprint inputs are used to determine whether a model derives from a specific source model.
Timeline (last 90 days)
Model watermarking actively injects specific patterns into model outputs, whereas model fingerprinting extracts the model's inherent behavioral features that can be used for identification.
In distillation attack scenarios, fingerprinting techniques can be used for post-hoc forensics to determine whether a suspicious substitute model originated from distillation of one's own model.
The limitation of fingerprinting techniques is that if additional fine-tuning or data augmentation is added during distillation, the original fingerprint may be weakened.
All Facts (3)
Model watermarking actively injects specific patterns into model outputs, whereas model fingerprinting extracts the model's inherent behavioral features that can be used for identification.
50%UnverifiedIn distillation attack scenarios, fingerprinting techniques can be used for post-hoc forensics to determine whether a suspicious substitute model originated from distillation of one's own model.
50%UnverifiedThe limitation of fingerprinting techniques is that if additional fine-tuning or data augmentation is added during distillation, the original fingerprint may be weakened.
50%