Efficient and robust DNN model fingerprint with decision difference regions identification

TL;DR

This paper upgrades fingerprint evidence from a source-boundary transferability heuristic to an explicit ownership-separation objective, formulate fingerprint construction as a decision difference region (DDR) search problem and solve it with two non-invasive variants, giving owners a tunable trade-off between construction cost and verification confidence.