English
Related papers

Related papers: Entangled Watermarks as a Defense against Model Ex…

200 papers

Obtaining a well-trained model involves expensive data collection and training procedures, therefore the model is a valuable intellectual property. Recent studies revealed that adversaries can `steal' deployed models even when they have no…

Cryptography and Security · Computer Science 2021-12-08 Yiming Li , Linghui Zhu , Xiaojun Jia , Yong Jiang , Shu-Tao Xia , Xiaochun Cao

Watermarking enables GenAI providers to verify whether content was generated by their models. A watermark is a hidden signal in the content, whose presence can be detected using a secret watermark key. A core security threat are forgery…

Cryptography and Security · Computer Science 2026-05-12 Toluwani Aremu , Noor Hussein , Munachiso Nwadike , Samuele Poppi , Jie Zhang , Karthik Nandakumar , Neil Gong , Nils Lukas

Large language models (LLMs) demonstrate general intelligence across a variety of machine learning tasks, thereby enhancing the commercial value of their intellectual property (IP). To protect this IP, model owners typically allow user…

Cryptography and Security · Computer Science 2025-01-14 Kaiyi Pang , Tao Qi , Chuhan Wu , Minhao Bai , Minghu Jiang , Yongfeng Huang

Watermarking plays a key role in the provenance and detection of AI-generated content. While existing methods prioritize robustness against real-world distortions (e.g., JPEG compression and noise addition), we reveal a fundamental…

Computer Vision and Pattern Recognition · Computer Science 2025-02-11 Zhongjie Ba , Yitao Zhang , Peng Cheng , Bin Gong , Xinyu Zhang , Qinglong Wang , Kui Ren

Deep learning has achieved tremendous success in numerous industrial applications. As training a good model often needs massive high-quality data and computation resources, the learned models often have significant business values. However,…

Multimedia · Computer Science 2020-02-26 Jie Zhang , Dongdong Chen , Jing Liao , Han Fang , Weiming Zhang , Wenbo Zhou , Hao Cui , Nenghai Yu

Large Language Models (LLMs) have demonstrated exceptional capabilities in natural language understanding and generation. Based on these LLMs, businesses have started to provide Embeddings-as-a-Service (EaaS), offering feature extraction…

Computation and Language · Computer Science 2025-12-04 Anudeex Shetty

As companies continue to invest heavily in larger, more accurate and more robust deep learning models, they are exploring approaches to monetize their models while protecting their intellectual property. Model licensing is promising, but…

Cryptography and Security · Computer Science 2020-12-04 Huiying Li , Emily Wenger , Shawn Shan , Ben Y. Zhao , Haitao Zheng

The rise of machine learning as a service and model sharing platforms has raised the need of traitor-tracing the models and proof of authorship. Watermarking technique is the main component of existing methods for protecting copyright of…

Cryptography and Security · Computer Science 2019-06-17 Ziqi Yang , Hung Dang , Ee-Chien Chang

Latent diffusion models have exhibited considerable potential in generative tasks. Watermarking is considered to be an alternative to safeguard the copyright of generative models and prevent their misuse. However, in the context of model…

Cryptography and Security · Computer Science 2025-02-20 Liangqi Lei , Keke Gai , Jing Yu , Liehuang Zhu , Qi Wu

Recommender systems embody significant commercial value and represent crucial intellectual property. However, the integrity of these systems is constantly challenged by malicious actors seeking to steal their underlying models. Safeguarding…

Information Retrieval · Computer Science 2024-10-01 Sixiao Zhang , Cheng Long , Wei Yuan , Hongxu Chen , Hongzhi Yin

Machine Learning is becoming a pivotal aspect of many systems today, offering newfound performance on classification and prediction tasks, but this rapid integration also comes with new unforeseen vulnerabilities. To harden these systems…

Cryptography and Security · Computer Science 2022-02-22 Ahmed Abdou , Ryan Sheatsley , Yohan Beugin , Tyler Shipp , Patrick McDaniel

In recent years, there has been significant advancement in the field of model watermarking techniques. However, the protection of image-processing neural networks remains a challenge, with only a limited number of methods being developed.…

Cryptography and Security · Computer Science 2023-02-20 Huajie Chen , Tianqing Zhu , Chi Liu , Shui Yu , Wanlei Zhou

In the rapidly evolving domain of artificial intelligence, safeguarding the intellectual property of Large Language Models (LLMs) is increasingly crucial. Current watermarking techniques against model extraction attacks, which rely on…

Cryptography and Security · Computer Science 2024-05-03 Minhao Bai , Kaiyi Pang , Yongfeng Huang

Watermarking has become the tendency in protecting the intellectual property of DNN models. Recent works, from the adversary's perspective, attempted to subvert watermarking mechanisms by designing watermark removal attacks. However, these…

Cryptography and Security · Computer Science 2021-05-18 Shangwei Guo , Tianwei Zhang , Han Qiu , Yi Zeng , Tao Xiang , Yang Liu

Embeddings-as-a-Service (EaaS) is a service offered by large language model (LLM) developers to supply embeddings generated by LLMs. Previous research suggests that EaaS is prone to imitation attacks -- attacks that clone the underlying…

Cryptography and Security · Computer Science 2025-06-03 Anudeex Shetty , Qiongkai Xu , Jey Han Lau

The state of the art performance of deep learning models comes at a high cost for companies and institutions, due to the tedious data collection and the heavy processing requirements. Recently, [35, 22] proposed to watermark convolutional…

Cryptography and Security · Computer Science 2021-04-14 Erwan Le Merrer , Patrick Perez , Gilles Trédan

The intellectual property (IP) of Deep neural networks (DNNs) can be easily ``stolen'' by surrogate model attack. There has been significant progress in solutions to protect the IP of DNN models in classification tasks. However, little…

Cryptography and Security · Computer Science 2021-08-06 Jie Zhang , Dongdong Chen , Jing Liao , Han Fang , Zehua Ma , Weiming Zhang , Gang Hua , Nenghai Yu

Deep neural networks are valuable assets considering their commercial benefits and huge demands for costly annotation and computation resources. To protect the copyright of DNNs, backdoor-based ownership verification becomes popular…

Cryptography and Security · Computer Science 2023-09-12 Guanhao Gan , Yiming Li , Dongxian Wu , Shu-Tao Xia

The widespread open-sourcing of advanced recommendation algorithms and the rising threat of model extraction attacks have made safeguarding the intellectual property of recommender systems an imperative task. While watermarking serves as a…

Information Retrieval · Computer Science 2026-04-28 Lei Zhou , Min Gao , Zongwei Wang , Yibing Bai , Wentao Li

In recent years, various watermarking methods were suggested to detect computer vision models obtained illegitimately from their owners, however they fail to demonstrate satisfactory robustness against model extraction attacks. In this…

Computer Vision and Pattern Recognition · Computer Science 2022-11-28 Jacob Shams , Ben Nassi , Ikuya Morikawa , Toshiya Shimizu , Asaf Shabtai , Yuval Elovici