Protecting Deep Learning Model Copyrights with Adversarial Example-Free Reuse Detection
The NFARD method detects unauthorized deep learning model reuse without needing adversarial examples or labels, using only normal test samples. It measures differences in neuron functionality—how neurons map input to output—to identify if models are reused. This novel approach handles different model architectures and tasks effectively, offering a faster and more comprehensive way to protect intellectual property.