{"id":"W2990378874","doi":"10.48550/arxiv.1912.00888","title":"Deep Neural Network Fingerprinting by Conferrable Adversarial Examples","year":2019,"lang":"en","type":"preprint","venue":"arXiv (Cornell University)","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":23,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Computer science; Artificial intelligence; Adversarial system; Fingerprint (computing); Transfer of learning; Artificial neural network; Machine learning; Weighting; Adversary; Data mining; Pattern recognition (psychology); Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0006605214,0.0006235184,0.0007041905,0.0001946252,0.0004431581,0.0003862491,0.003797023,0.000574269,0.0001219254],"category_scores_gemma":[0.0001827339,0.0007744165,0.0003483992,0.0006465102,0.0001480748,0.0007744118,0.006404095,0.001902069,0.0001733054],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0003052146,"about_ca_system_score_gemma":0.0002453801,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0005839794,"about_ca_topic_score_gemma":0.00003823124,"domain_scores_codex":[0.99594,0.0004786304,0.0003951547,0.001981586,0.0002217449,0.0009829043],"domain_scores_gemma":[0.996514,0.0005158175,0.0006614461,0.001899773,0.0001778167,0.0002311916],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00003481045,0.00003159292,0.006314386,0.00006257536,0.00009899597,0.0001090792,0.000176765,0.9433742,0.00001666742,0.04750922,0.001111814,0.001159906],"study_design_scores_gemma":[0.0007456043,0.00004159744,0.000387569,0.00009505518,0.00007595525,0.000005354363,0.00006146555,0.9848335,0.00001455232,0.01049785,0.002453735,0.0007877719],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.03912932,0.0001699208,0.9505515,0.0001435049,0.004027158,0.0004434413,0.00000583285,0.0005944465,0.004934915],"genre_scores_gemma":[0.985195,0.00005442339,0.0122525,0.0001976418,0.0005545675,0.000001388225,0.00004955935,0.00005559738,0.001639369],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9460657,"threshold_uncertainty_score":0.9994707,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.05084058482975618,"score_gpt":0.194898398786803,"score_spread":0.1440578139570469,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}