English
Related papers

Related papers: Rethinking White-Box Watermarks on Deep Learning M…

200 papers

Deep neural networks (DNN) have achieved remarkable performance in various fields. However, training a DNN model from scratch requires a lot of computing resources and training data. It is difficult for most individual users to obtain such…

Multimedia · Computer Science 2022-07-05 Haoqi Wang , Mingfu Xue , Shichang Sun , Yushu Zhang , Jian Wang , Weiqiang Liu

The growing popularity of Deep Neural Networks, which often require computationally expensive training and access to a vast amount of data, calls for accurate authorship verification methods to deter unlawful dissemination of the models and…

Cryptography and Security · Computer Science 2024-01-04 Elena Rodriguez-Lois , Fernando Perez-Gonzalez

Despite the tremendous success, deep neural networks are exposed to serious IP infringement risks. Given a target deep model, if the attacker knows its full information, it can be easily stolen by fine-tuning. Even if only its output is…

Computer Vision and Pattern Recognition · Computer Science 2021-03-09 Jie Zhang , Dongdong Chen , Jing Liao , Weiming Zhang , Huamin Feng , Gang Hua , Nenghai Yu

With substantial amount of time, resources and human (team) efforts invested to explore and develop successful deep neural networks (DNN), there emerges an urgent need to protect these inventions from being illegally copied, redistributed,…

Cryptography and Security · Computer Science 2019-11-05 Lixin Fan , Kam Woh Ng , Chee Seng Chan

In this paper, we present DSN (Deep Serial Number), a simple yet effective watermarking algorithm designed specifically for deep neural networks (DNNs). Unlike traditional methods that incorporate identification signals into DNNs, our…

Cryptography and Security · Computer Science 2023-07-28 Ruixiang Tang , Mengnan Du , Xia Hu

Due to the wide use of highly-valuable and large-scale deep neural networks (DNNs), it becomes crucial to protect the intellectual property of DNNs so that the ownership of disputed or stolen DNNs can be verified. Most existing solutions…

Cryptography and Security · Computer Science 2021-03-26 Peizhuo Lv , Pan Li , Shengzhi Zhang , Kai Chen , Ruigang Liang , Yue Zhao , Yingjiu Li

Engineering a top-notch deep learning model is an expensive procedure that involves collecting data, hiring human resources with expertise in machine learning, and providing high computational resources. For that reason, deep learning…

Machine Learning · Computer Science 2021-03-08 Omid Aramoon , Pin-Yu Chen , Gang Qu

Deep Neural Networks have recently gained lots of success after enabling several breakthroughs in notoriously challenging problems. Training these networks is computationally expensive and requires vast amounts of training data. Selling…

Machine Learning · Computer Science 2018-06-12 Yossi Adi , Carsten Baum , Moustapha Cisse , Benny Pinkas , Joseph Keshet

DNNs shall be considered as the intellectual property (IP) of the model builder due to the impeding cost of designing/training a highly accurate model. Research attempts have been made to protect the authorship of the trained model and…

Multimedia · Computer Science 2018-11-12 Huili Chen , Bita Darvish Rouhani , Xinwei Fan , Osman Cihan Kilinc , Farinaz Koushanfar

Creating a state-of-the-art deep-learning system requires vast amounts of data, expertise, and hardware, yet research into embedding copyright protection for neural networks has been limited. One of the main methods for achieving such…

Cryptography and Security · Computer Science 2020-04-27 William Aiken , Hyoungshick Kim , Simon Woo

Watermarking has become a plausible candidate for ownership verification and intellectual property protection of deep neural networks. Regarding image classification neural networks, current watermarking schemes uniformly resort to backdoor…

Cryptography and Security · Computer Science 2022-04-12 Fangqi Li , Shilin Wang

Deep Neural Networks (DNNs) have gained considerable traction in recent years due to the unparalleled results they gathered. However, the cost behind training such sophisticated models is resource intensive, resulting in many to consider…

Machine Learning · Computer Science 2025-05-12 Anh Tu Ngo , Chuan Song Heng , Nandish Chattopadhyay , Anupam Chattopadhyay

To protect the intellectual property of well-trained deep neural networks (DNNs), black-box watermarks, which are embedded into the prediction behavior of DNN models on a set of specially-crafted samples and extracted from suspect models…

Cryptography and Security · Computer Science 2024-09-04 Yifan Lu , Wenxuan Li , Mi Zhang , Xudong Pan , Min Yang

Backdoor watermarking is a promising paradigm to protect the copyright of deep neural network (DNN) models. In the existing works on this subject, researchers have intensively focused on watermarking robustness, while the concept of…

Cryptography and Security · Computer Science 2023-11-02 Guang Hua , Andrew Beng Jin Teoh

In this paper, we propose a novel DNN watermarking method that utilizes a learnable image transformation method with a secret key. The proposed method embeds a watermark pattern in a model by using learnable transformed images and allows us…

Computer Vision and Pattern Recognition · Computer Science 2021-04-12 MaungMaung AprilPyone , Hitoshi Kiya

To ensure the responsible distribution and use of open-source deep neural networks (DNNs), DNN watermarking has become a crucial technique to trace and verify unauthorized model replication or misuse. In practice, black-box watermarks…

Cryptography and Security · Computer Science 2026-02-04 Huming Qiu , Mi Zhang , Junjie Sun , Peiyi Chen , Xiaohan Zhang , Min Yang

Graph Neural Networks (GNNs) have achieved promising performance in various real-world applications. Building a powerful GNN model is not a trivial task, as it requires a large amount of training data, powerful computing resources, and…

Machine Learning · Computer Science 2022-11-15 Jing Xu , Stefanos Koffas , Oguzhan Ersoy , Stjepan Picek

Graph Neural Networks (GNNs) are widely deployed in industry, making their intellectual property valuable. However, protecting GNNs from unauthorized use remains a challenge. Watermarking offers a solution by embedding ownership information…

Cryptography and Security · Computer Science 2026-05-12 Jane Downer , Yingdan Shi , Ziyan Liu , Ren Wang , Binghui Wang

Recently, the research on protecting the intellectual properties (IP) of deep neural networks (DNN) has attracted serious concerns. A number of DNN copyright protection methods have been proposed. However, most of the existing watermarking…

Artificial Intelligence · Computer Science 2022-07-05 Shichang Sun , Mingfu Xue , Jian Wang , Weiqiang Liu

With the widespread deployment of deep neural network (DNN) models, dynamic watermarking techniques are being used to protect the intellectual property of model owners. However, recent studies have shown that existing watermarking schemes…

Cryptography and Security · Computer Science 2025-06-04 Brian Choi , Shu Wang , Isabelle Choi , Kun Sun