English
Related papers

Related papers: Fine-tuning Is Not Enough: A Simple yet Effective …

200 papers

Recently, numerous highly-valuable Deep Neural Networks (DNNs) have been trained using deep learning algorithms. To protect the Intellectual Property (IP) of the original owners over such DNN models, backdoor-based watermarks have been…

Cryptography and Security · Computer Science 2024-01-30 Peizhuo Lv , Hualong Ma , Kai Chen , Jiachen Zhou , Shengzhi Zhang , Ruigang Liang , Shenchen Zhu , Pan Li , Yingjun Zhang

Invisible watermarks safeguard images' copyrights by embedding hidden messages only detectable by owners. They also prevent people from misusing images, especially those generated by AI models. We propose a family of regeneration attacks to…

Cryptography and Security · Computer Science 2024-11-01 Xuandong Zhao , Kexun Zhang , Zihao Su , Saastha Vasan , Ilya Grishchenko , Christopher Kruegel , Giovanni Vigna , Yu-Xiang Wang , Lei Li

Fine-tuning attacks are effective in removing the embedded watermarks in deep learning models. However, when the source data is unavailable, it is challenging to just erase the watermark without jeopardizing the model performance. In this…

Computer Vision and Pattern Recognition · Computer Science 2022-04-06 Qi Zhong , Leo Yu Zhang , Shengshan Hu , Longxiang Gao , Jun Zhang , Yong Xiang

Watermarking techniques are vital for protecting intellectual property and preventing fraudulent use of media. Most previous watermarking schemes designed for diffusion models embed a secret key in the initial noise. The resulting pattern…

Computer Vision and Pattern Recognition · Computer Science 2025-04-30 Anubhav Jain , Yuya Kobayashi , Naoki Murata , Yuhta Takida , Takashi Shibuya , Yuki Mitsufuji , Niv Cohen , Nasir Memon , Julian Togelius

The proliferation of Deep Neural Networks (DNN) in commercial applications is expanding rapidly. Simultaneously, the increasing complexity and cost of training DNN models have intensified the urgency surrounding the protection of…

Cryptography and Security · Computer Science 2023-12-12 Junlong Mao , Huiyi Tang , Yi Zhang , Fengxia Liu , Zhiyong Zheng , Shanxiang Lyu

Recent research has demonstrated that adding some imperceptible perturbations to original images can fool deep learning models. However, the current adversarial perturbations are usually shown in the form of noises, and thus have no…

Cryptography and Security · Computer Science 2020-09-01 Xiaojun Jia , Xingxing Wei , Xiaochun Cao , Xiaoguang Han

Deep Learning (DL) models have become crucial in digital transformation, thus raising concerns about their intellectual property rights. Different watermarking techniques have been developed to protect Deep Neural Networks (DNNs) from IP…

Cryptography and Security · Computer Science 2024-03-07 Alessandro Pegoraro , Carlotta Segna , Kavita Kumari , Ahmad-Reza Sadeghi

Watermarking is an important copyright protection technology which generally embeds the identity information into the carrier imperceptibly. Then the identity can be extracted to prove the copyright from the watermarked carrier even after…

Computer Vision and Pattern Recognition · Computer Science 2022-03-01 Sulong Ge , Zhihua Xia , Jianwei Fei , Xingming Sun , Jian Weng

Deep learning has achieved tremendous success in numerous industrial applications. As training a good model often needs massive high-quality data and computation resources, the learned models often have significant business values. However,…

Multimedia · Computer Science 2020-02-26 Jie Zhang , Dongdong Chen , Jing Liao , Han Fang , Weiming Zhang , Wenbo Zhou , Hao Cui , Nenghai Yu

With the rise of Machine Learning as a Service (MLaaS) platforms,safeguarding the intellectual property of deep learning models is becoming paramount. Among various protective measures, trigger set watermarking has emerged as a flexible and…

Cryptography and Security · Computer Science 2024-04-23 Hongyu Zhu , Sichu Liang , Wentao Hu , Fangqi Li , Ju Jia , Shilin Wang

Robust invisible watermarking aims to embed hidden information into images such that the watermark can survive various image manipulations. However, the rise of powerful diffusion-based image generation and editing techniques poses a new…

Computer Vision and Pattern Recognition · Computer Science 2025-10-08 Yunyi Ni , Finn Carter , Ze Niu , Emily Davis , Bo Zhang

Deep Neural Networks (DNN) are gaining higher commercial values in computer vision applications, e.g., image classification, video analytics, etc. This calls for urgent demands of the intellectual property (IP) protection of DNN models. In…

Cryptography and Security · Computer Science 2022-06-29 Xiaoxuan Lou , Shangwei Guo , Jiwei Li , Tianwei Zhang

Recently, the research on protecting the intellectual properties (IP) of deep neural networks (DNN) has attracted serious concerns. A number of DNN copyright protection methods have been proposed. However, most of the existing watermarking…

Artificial Intelligence · Computer Science 2022-07-05 Shichang Sun , Mingfu Xue , Jian Wang , Weiqiang Liu

With the rapid development of deep neural networks(DNNs), many robust blind watermarking algorithms and frameworks have been proposed and achieved good results. At present, the watermark attack algorithm can not compete with the watermark…

Multimedia · Computer Science 2023-06-23 Xinyu Li

Machine learning models are being used in an increasing number of critical applications; thus, securing their integrity and ownership is critical. Recent studies observed that adversarial training and watermarking have a conflicting…

Machine Learning · Computer Science 2024-01-09 Janvi Thakkar , Giulio Zizzo , Sergio Maffeis

Protecting deep neural networks (DNNs) against intellectual property (IP) infringement has attracted an increasing attention in recent years. Recent advances focus on IP protection of generative models, which embed the watermark information…

Cryptography and Security · Computer Science 2024-04-16 Li Zhang , Yong Liu , Xinpeng Zhang , Hanzhou Wu

Robust invisible watermarking schemes aim to embed hidden information into images such that the watermark survives common manipulations. However, powerful diffusion-based image generation and editing techniques now pose a new threat to…

Cryptography and Security · Computer Science 2026-02-25 Fan Guo , Jiyu Kang , Qi Ming , Emily Davis , Finn Carter

DNN watermarking is receiving an increasing attention as a suitable mean to protect the Intellectual Property Rights associated to DNN models. Several methods proposed so far are inspired to the popular Spread Spectrum (SS) paradigm…

Cryptography and Security · Computer Science 2020-12-29 Yue Li , Benedetta Tondi , Mauro Barni

Digital watermarking enables protection against copyright infringement of images. Although existing methods embed watermarks imperceptibly and demonstrate robustness against attacks, they typically lack resilience against geometric…

Multimedia · Computer Science 2024-02-15 Hannes Mareen , Lucas Antchougov , Glenn Van Wallendael , Peter Lambert

Watermarking is a key technique for detecting AI-generated text. In this work, we study its vulnerabilities and introduce the Smoothing Attack, a novel watermark removal method. By leveraging the relationship between the model's confidence…

Machine Learning · Computer Science 2025-02-06 Hongyan Chang , Hamed Hassani , Reza Shokri