{"id":"https://openalex.org/W3169839597","doi":"https://doi.org/10.1145/3460319.3464816","title":"ModelDiff: testing-based DNN similarity comparison for model reuse detection","display_name":"ModelDiff: testing-based DNN similarity comparison for model reuse detection","publication_year":2021,"publication_date":"2021-07-08","ids":{"openalex":"https://openalex.org/W3169839597","doi":"https://doi.org/10.1145/3460319.3464816","mag":"3169839597"},"language":"en","primary_location":{"id":"doi:10.1145/3460319.3464816","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3460319.3464816","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2106.08890","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100628298","display_name":"Yuanchun Li","orcid":"https://orcid.org/0000-0002-1591-2526"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuanchun Li","raw_affiliation_strings":["Microsoft Research, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100404392","display_name":"Ziqi Zhang","orcid":"https://orcid.org/0000-0002-8587-8618"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziqi Zhang","raw_affiliation_strings":["Peking University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101497182","display_name":"Bingyan Liu","orcid":"https://orcid.org/0000-0003-2613-9863"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bingyan Liu","raw_affiliation_strings":["Peking University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peking University, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029661948","display_name":"Ziyue Yang","orcid":"https://orcid.org/0000-0002-1658-0260"},"institutions":[{"id":"https://openalex.org/I4210113369","display_name":"Microsoft Research Asia (China)","ror":"https://ror.org/0300m5276","country_code":"CN","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210113369"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziyue Yang","raw_affiliation_strings":["Microsoft Research, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, China","institution_ids":["https://openalex.org/I4210113369"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102880548","display_name":"Yunxin Liu","orcid":"https://orcid.org/0000-0001-7352-8955"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunxin Liu","raw_affiliation_strings":["Tsinghua University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":48,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"139","last_page":"151"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.7540407180786133},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7529560923576355},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.6787070035934448},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6609988212585449},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.6310322284698486},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.529589831829071},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5185040235519409},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.44363126158714294},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.42775386571884155},{"id":"https://openalex.org/keywords/cosine-similarity","display_name":"Cosine similarity","score":0.4188345670700073},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4031863212585449},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.2713974714279175},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.1109645664691925},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.10008186101913452}],"concepts":[{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.7540407180786133},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7529560923576355},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.6787070035934448},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6609988212585449},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.6310322284698486},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.529589831829071},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5185040235519409},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.44363126158714294},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.42775386571884155},{"id":"https://openalex.org/C2780762811","wikidata":"https://www.wikidata.org/wiki/Q1784941","display_name":"Cosine similarity","level":3,"score":0.4188345670700073},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4031863212585449},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2713974714279175},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.1109645664691925},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.10008186101913452},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C548081761","wikidata":"https://www.wikidata.org/wiki/Q180388","display_name":"Waste management","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3460319.3464816","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3460319.3464816","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 30th ACM SIGSOFT International Symposium on Software Testing and Analysis","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2106.08890","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2106.08890","pdf_url":"https://arxiv.org/pdf/2106.08890","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2106.08890","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2106.08890","pdf_url":"https://arxiv.org/pdf/2106.08890","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"score":0.7699999809265137,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":88,"referenced_works":["https://openalex.org/W596492259","https://openalex.org/W1673923490","https://openalex.org/W1821462560","https://openalex.org/W1942295288","https://openalex.org/W1945616565","https://openalex.org/W1976892921","https://openalex.org/W1985205072","https://openalex.org/W2041190309","https://openalex.org/W2096491586","https://openalex.org/W2104301886","https://openalex.org/W2108598243","https://openalex.org/W2111295912","https://openalex.org/W2125980283","https://openalex.org/W2135841285","https://openalex.org/W2136099030","https://openalex.org/W2150855759","https://openalex.org/W2157532207","https://openalex.org/W2165698076","https://openalex.org/W2165739648","https://openalex.org/W2194775991","https://openalex.org/W2435473771","https://openalex.org/W2461943168","https://openalex.org/W2515385951","https://openalex.org/W2533598788","https://openalex.org/W2579318729","https://openalex.org/W2616028256","https://openalex.org/W2621123093","https://openalex.org/W2640329709","https://openalex.org/W2748789698","https://openalex.org/W2749008552","https://openalex.org/W2752559890","https://openalex.org/W2753783305","https://openalex.org/W2766078762","https://openalex.org/W2767204723","https://openalex.org/W2786379237","https://openalex.org/W2804337238","https://openalex.org/W2807716166","https://openalex.org/W2882973660","https://openalex.org/W2884426148","https://openalex.org/W2888320512","https://openalex.org/W2888940765","https://openalex.org/W2898868990","https://openalex.org/W2899585792","https://openalex.org/W2915002466","https://openalex.org/W2926178846","https://openalex.org/W2935349488","https://openalex.org/W2935974388","https://openalex.org/W2943864570","https://openalex.org/W2946635188","https://openalex.org/W2949558627","https://openalex.org/W2950500611","https://openalex.org/W2952348804","https://openalex.org/W2952608669","https://openalex.org/W2957905354","https://openalex.org/W2963163009","https://openalex.org/W2963207607","https://openalex.org/W2963303354","https://openalex.org/W2963327228","https://openalex.org/W2963674932","https://openalex.org/W2963750162","https://openalex.org/W2963759780","https://openalex.org/W2963771448","https://openalex.org/W2963923490","https://openalex.org/W2964153729","https://openalex.org/W2964299589","https://openalex.org/W2964318098","https://openalex.org/W2967540978","https://openalex.org/W2967682612","https://openalex.org/W2969542116","https://openalex.org/W2970272159","https://openalex.org/W2976310720","https://openalex.org/W2982642565","https://openalex.org/W2984699060","https://openalex.org/W2985913519","https://openalex.org/W2990266720","https://openalex.org/W2990378874","https://openalex.org/W2995858837","https://openalex.org/W2996458309","https://openalex.org/W3002398329","https://openalex.org/W3007157104","https://openalex.org/W3090119274","https://openalex.org/W3099444373","https://openalex.org/W3099610985","https://openalex.org/W3102183821","https://openalex.org/W3105926539","https://openalex.org/W3142518606","https://openalex.org/W3156793535","https://openalex.org/W3163168187"],"related_works":["https://openalex.org/W2389818373","https://openalex.org/W4392445444","https://openalex.org/W4396220545","https://openalex.org/W2220831889","https://openalex.org/W4312683641","https://openalex.org/W3027421045","https://openalex.org/W2576320324","https://openalex.org/W3013312691","https://openalex.org/W2980386803","https://openalex.org/W3215994059"],"abstract_inverted_index":{"The":[0,112],"knowledge":[1,24,113],"of":[2,58,66,78,85,110,138,167,185],"a":[3,11,48,86,91,108,132],"deep":[4,52,178],"learning":[5,53,179],"model":[6,54,87,144,150,153,171],"may":[7,32,38],"be":[8,34],"transferred":[9],"to":[10,15,51,107],"student":[12],"model,":[13],"leading":[14],"intellectual":[16],"property":[17],"infringement":[18],"or":[19,64],"vulnerability":[20],"propagation.":[21],"Detecting":[22],"such":[23],"reuse":[25,145,172],"is":[26,88,100,118],"nontrivial":[27],"because":[28],"the":[29,61,75,82,101,104,121,161,165,183],"suspect":[30],"models":[31,117,139],"not":[33],"white-box":[35],"accessible":[36],"and/or":[37],"serve":[39],"different":[40],"tasks.":[41],"In":[42],"this":[43],"paper,":[44],"we":[45,69,130],"propose":[46],"ModelDiff,":[47,129],"testing-based":[49],"approach":[50],"similarity":[55,114,123],"comparison.":[56],"Instead":[57],"directly":[59],"comparing":[60],"weights,":[62],"activations,":[63],"outputs":[65],"two":[67,116],"models,":[68],"compare":[70],"their":[71,125],"behavioral":[72,83],"patterns":[73],"on":[74,160,176,187],"same":[76],"set":[77],"test":[79],"inputs.":[80,111],"Specifically,":[81],"pattern":[84],"represented":[89],"as":[90],"decision":[92],"distance":[93,102],"vector":[94],"(DDV),":[95],"in":[96],"which":[97,163],"each":[98],"element":[99],"between":[103,115,124],"model's":[105],"reactions":[106],"pair":[109],"measured":[119],"with":[120],"cosine":[122],"DDVs.":[126],"To":[127],"evaluate":[128],"created":[131],"benchmark":[133],"that":[134,140],"contains":[135],"144":[136],"pairs":[137],"cover":[141],"most":[142],"popular":[143],"methods,":[146],"including":[147],"transfer":[148],"learning,":[149],"compression,":[151],"and":[152],"stealing.":[154],"Our":[155],"method":[156],"achieved":[157],"91.7%":[158],"correctness":[159],"benchmark,":[162],"demonstrates":[164],"effectiveness":[166],"using":[168],"ModelDiff":[169,186],"for":[170],"detection.":[173],"A":[174],"study":[175],"mobile":[177],"apps":[180],"has":[181],"shown":[182],"feasibility":[184],"real-world":[188],"models.":[189]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":14},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}