Training Deep Neural Networks (DNNs) can be expensive when data is difficult to obtain or labeling them requires significant domain expertise.Hence, it is crucial that the Intellectual Property (IP) of DNNs trained on valuable data be protected against IP infringement.DNN fingerprinting and watermarking are two lines of work in DNN IP protection.Recently proposed DNN fingerprinting techniques are able to detect IP infringement while preserving model performance by relying on the key assumption that the decision boundaries of independently trained models are intrinsically different from one another.In contrast, DNN watermarking embeds a watermark in a model and verifies IP infringement if an identical or similar watermark is extracted from a suspect model.The techniques deployed in fingerprinting and watermarking vary significantly because their underlying mechanisms are different.From an adversary's perspective, a successful IP removal attack should defeat both fingerprinting and