中文
相关论文

相关论文: Removing Backdoor-Based Watermarks in Neural Netwo…

200 篇论文

Large language models (LLMs) have demonstrated outstanding performance, making them valuable digital assets with significant commercial potential. Unfortunately, the LLM and its API are susceptible to intellectual property theft.…

密码学与安全 · 计算机科学 2024-07-25 Shuai Li , Kejiang Chen , Kunsheng Tang , Jie Zhang , Weiming Zhang , Nenghai Yu , Kai Zeng

Efficient knowledge injection methods for Large Language Models (LLMs), such as In-Context Learning, knowledge editing, and efficient parameter fine-tuning, significantly enhance model utility on downstream tasks. However, they also pose…

密码学与安全 · 计算机科学 2026-01-23 Ziwei Zhang , Juan Wen , Wanli Peng , Zhengxian Wu , Yinghan Zhou , Yiming Xue

Protecting the intellectual property of machine learning models is a hot topic and many watermarking schemes for deep neural networks have been proposed in the literature. Unfortunately, prior work largely neglected the investigation of…

机器学习 · 计算机科学 2024-10-08 Stefano Calzavara , Lorenzo Cazzaro , Donald Gera , Salvatore Orlando

In recent years, various watermarking methods were suggested to detect computer vision models obtained illegitimately from their owners, however they fail to demonstrate satisfactory robustness against model extraction attacks. In this…

计算机视觉与模式识别 · 计算机科学 2022-11-28 Jacob Shams , Ben Nassi , Ikuya Morikawa , Toshiya Shimizu , Asaf Shabtai , Yuval Elovici

The recent advancements in large language models (LLMs) have sparked a growing apprehension regarding the potential misuse. One approach to mitigating this risk is to incorporate watermarking techniques into LLMs, allowing for the tracking…

密码学与安全 · 计算机科学 2023-10-19 Zhengmian Hu , Lichang Chen , Xidong Wu , Yihan Wu , Hongyang Zhang , Heng Huang

In today's digital landscape, the blending of AI-generated and authentic content has underscored the need for copyright protection and content authentication. Watermarking has become a vital tool to address these challenges, safeguarding…

计算机视觉与模式识别 · 计算机科学 2024-12-16 Runyi Hu , Jie Zhang , Yiming Li , Jiwei Li , Qing Guo , Han Qiu , Tianwei Zhang

Ownership verification for neural networks is important for protecting these models from illegal copying, free-riding, re-distribution and other intellectual property misuse. We present a novel methodology for neural network ownership…

密码学与安全 · 计算机科学 2023-06-27 Feisi Fu , Wenchao Li

The functionality of a deep learning (DL) model can be stolen via model extraction where an attacker obtains a surrogate model by utilizing the responses from a prediction API of the original model. In this work, we propose a novel…

密码学与安全 · 计算机科学 2022-07-28 Abhishek Chakraborty , Daniel Xing , Yuntao Liu , Ankur Srivastava

Recent fine-tuning techniques for diffusion models enable them to reproduce specific image sets, such as particular faces or artistic styles, but also introduce copyright and security risks. Dataset watermarking has been proposed to ensure…

计算机视觉与模式识别 · 计算机科学 2026-05-29 Xincheng Wang , Hanchi Sun , Wenjun Sun , Kejun Xue , Wangqiu Zhou , Jianbo Zhang , Wei Sun , Dandan Zhu , Xiongkuo Min , Jun Jia , Zhijun Fang

Quantum neural networks (QNNs) leverage quantum computing to create powerful and efficient artificial intelligence models capable of solving complex problems significantly faster than traditional computers. With the fast development of…

密码学与安全 · 计算机科学 2025-09-11 Limengnan Zhou , Hanzhou Wu

Model fragile watermarking, inspired by both the field of adversarial attacks on neural networks and traditional multimedia fragile watermarking, has gradually emerged as a potent tool for detecting tampering, and has witnessed rapid…

密码学与安全 · 计算机科学 2024-08-15 Zhenzhe Gao , Yu Cheng , Zhaoxia Yin

Watermarking serves as a widely adopted approach to safeguard media copyright. In parallel, the research focus has extended to watermark removal techniques, offering an adversarial means to enhance watermark robustness and foster…

多媒体 · 计算机科学 2023-08-23 Dongjian Huo , Zehong Zhang , Hanjing Su , Guanbin Li , Chaowei Fang , Qingyao Wu

Motivated by the problem of detecting AI-generated text, we consider the problem of watermarking the output of language models with provable guarantees. We aim for watermarks which satisfy: (a) undetectability, a cryptographic notion…

密码学与安全 · 计算机科学 2025-05-29 Noah Golowich , Ankur Moitra

The proliferation of AI-generated content has facilitated sophisticated face manipulation, severely undermining visual integrity and posing unprecedented challenges to intellectual property. In response, a common proactive defense leverages…

计算机视觉与模式识别 · 计算机科学 2026-02-25 Haonan An , Xiaohui Ye , Guang Hua , Yihang Tao , Hangcheng Cao , Xiangyu Yu , Yuguang Fang

Deep learning techniques have made tremendous progress in a variety of challenging tasks, such as image recognition and machine translation, during the past decade. Training deep neural networks is computationally expensive and requires…

密码学与安全 · 计算机科学 2019-11-11 Zheng Li , Chengyu Hu , Yang Zhang , Shanqing Guo

Code datasets are of immense value for training neural-network-based code completion models, where companies or organizations have made substantial investments to establish and process these datasets. Unluckily, these datasets, either built…

软件工程 · 计算机科学 2023-08-29 Zhensu Sun , Xiaoning Du , Fu Song , Li Li

Being trained on large and diverse datasets, visual foundation models (VFMs) can be fine-tuned to achieve remarkable performance and efficiency in various downstream computer vision tasks. The high computational cost of data collection and…

计算机视觉与模式识别 · 计算机科学 2026-03-12 Anna Chistyakova , Mikhail Pautov

We revisit Tree-Ring Watermarking, a recent diffusion model watermarking method that demonstrates great robustness to various attacks. We conduct an in-depth study on it and reveal that the distribution shift unintentionally introduced by…

计算机视觉与模式识别 · 计算机科学 2024-07-19 Hai Ci , Pei Yang , Yiren Song , Mike Zheng Shou

It is crucial to protect the intellectual property rights of DNN models prior to their deployment. The DNN should perform two main tasks: its primary task and watermarking task. This paper proposes a lightweight, reliable, and secure DNN…

密码学与安全 · 计算机科学 2022-12-07 Kassem Kallas , Teddy Furon

The rapid growth of transformer-based models increases the concerns about their integrity and ownership insurance. Watermarking addresses this issue by embedding a unique identifier into the model, while preserving its performance. However,…

密码学与安全 · 计算机科学 2024-01-19 Pierre Fernandez , Guillaume Couairon , Teddy Furon , Matthijs Douze