A
deep learning model Hash identification method based on multi-
feature fusion comprises the following steps: firstly, extracting structural features (layer type sorting de-duplication), parameter statistical features (quantile normalization and
histogram statistics) and functional behavior features (middle layer output quantiles) of a
deep learning model; then, model structure hash, parameter hash and function hash are calculated respectively; thirdly, generating a comprehensive hash value by fusing triple hash; meanwhile, a TLSH (Trend Micro Location-Sensitive Hashing)
algorithm is adopted, so that the tolerance of the TLSH
algorithm to the tiny fluctuation of the parameters is improved; and finally, based on
Hamming distance, calculating model similarity, and realizing efficient
black box model
traceability and infringement detection. The method does not need to modify a model structure or parameters, does not depend on
external data, supports high robustness to attacks such as
pruning and
fine tuning, and is suitable for various network architectures such as CNN and Transform. The method has the advantages of lightweight calculation, high concealment and cross-platform
adaptation capability, and can be widely applied to
intellectual property protection and infringement tracking scenes of a
deep learning model.