{"id":"https://openalex.org/W7141546937","doi":"https://doi.org/10.48550/arxiv.2603.24996","title":"IrisFP: Adversarial-Example-based Model Fingerprinting with Enhanced Uniqueness and Robustness","display_name":"IrisFP: Adversarial-Example-based Model Fingerprinting with Enhanced Uniqueness and Robustness","publication_year":2026,"publication_date":"2026-03-26","ids":{"openalex":"https://openalex.org/W7141546937","doi":"https://doi.org/10.48550/arxiv.2603.24996"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.24996","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.24996","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.24996","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039576301","display_name":"Ziye Geng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Geng, Ziye","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130749858","display_name":"Guang Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Guang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130740305","display_name":"Yihang Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Yihang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5130814541","display_name":"Changqing Luo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luo, Changqing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8761000037193298,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8761000037193298,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10828","display_name":"Biometric Identification and Security","score":0.030799999833106995,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11448","display_name":"Face recognition and analysis","score":0.01640000008046627,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.9117000102996826},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.8888000249862671},{"id":"https://openalex.org/keywords/uniqueness","display_name":"Uniqueness","score":0.6316999793052673},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5396999716758728},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.5134999752044678},{"id":"https://openalex.org/keywords/decision-boundary","display_name":"Decision boundary","score":0.44519999623298645},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.35019999742507935}],"concepts":[{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.9117000102996826},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8888000249862671},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6521000266075134},{"id":"https://openalex.org/C2777021972","wikidata":"https://www.wikidata.org/wiki/Q22976830","display_name":"Uniqueness","level":2,"score":0.6316999793052673},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5665000081062317},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5396999716758728},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.5134999752044678},{"id":"https://openalex.org/C42023084","wikidata":"https://www.wikidata.org/wiki/Q5249231","display_name":"Decision boundary","level":3,"score":0.44519999623298645},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3828999996185303},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.35019999742507935},{"id":"https://openalex.org/C168406668","wikidata":"https://www.wikidata.org/wiki/Q178022","display_name":"Fingerprint recognition","level":3,"score":0.3237000107765198},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32199999690055847},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.3183000087738037},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.31679999828338623},{"id":"https://openalex.org/C64543145","wikidata":"https://www.wikidata.org/wiki/Q162942","display_name":"Intersection (aeronautics)","level":2,"score":0.30720001459121704},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.2994999885559082},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2904999852180481},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.28600001335144043},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.28029999136924744},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.2678999900817871}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.24996","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.24996","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.24996","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.24996","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},"sustainable_development_goals":[{"score":0.7436456084251404,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0],"propose":[1],"IrisFP,":[2],"a":[3,53],"novel":[4],"adversarial-example-based":[5],"model":[6,117],"fingerprinting":[7],"framework":[8],"that":[9,51,143],"enhances":[10],"both":[11,71,155],"uniqueness":[12],"and":[13,21,73,94,98,122,132,157],"robustness":[14,72,156],"by":[15,153],"leveraging":[16],"multi-boundary":[17,87],"characteristics,":[18],"multi-sample":[19],"behaviors,":[20],"fingerprint":[22],"discriminative":[23,103,130],"power":[24,104],"assessment":[25],"to":[26,85,89,136],"generate":[27],"composite-sample":[28,78],"fingerprints.":[29,139],"Three":[30],"key":[31],"innovations":[32],"make":[33],"IrisFP":[34,144],"outstanding:":[35],"1)":[36],"It":[37,76,100],"positions":[38],"fingerprints":[39,64,107,127],"near":[40],"the":[41,59,86,102,126],"intersection":[42],"of":[43,105],"all":[44],"decision":[45],"boundaries":[46],"-":[47,56],"unlike":[48],"prior":[49],"methods":[50],"target":[52,67],"single":[54],"boundary":[55],"thus":[57],"increasing":[58],"prediction":[60],"margin":[61],"without":[62],"placing":[63],"deep":[65],"inside":[66],"class":[68],"regions,":[69],"enhancing":[70,154],"uniqueness;":[74,97],"2)":[75],"constructs":[77],"fingerprints,":[79],"each":[80],"comprising":[81],"multiple":[82],"samples":[83],"close":[84],"intersection,":[88],"exploit":[90],"collective":[91],"behavior":[92],"patterns":[93],"further":[95],"boost":[96],"3)":[99],"assesses":[101],"generated":[106],"using":[108],"statistical":[109],"separability":[110],"metrics":[111],"developed":[112],"based":[113],"on":[114],"two":[115],"reference":[116],"sets,":[118],"respectively,":[119],"for":[120],"pirated":[121],"independently-trained":[123],"models,":[124],"retains":[125],"with":[128],"high":[129],"power,":[131],"assigns":[133],"fingerprint-specific":[134],"thresholds":[135],"such":[137],"retained":[138],"Extensive":[140],"experiments":[141],"show":[142],"consistently":[145],"outperforms":[146],"state-of-the-art":[147],"methods,":[148],"achieving":[149],"reliable":[150],"ownership":[151],"verification":[152],"uniqueness.":[158]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-03-28T00:00:00"}
