中文
相关论文

相关论文: On the Robustness of Dataset Inference

200 篇论文

Federated learning is a distributed learning technique where machine learning models are trained on client devices in which the local training data resides. The training is coordinated via a central server which is, typically, controlled by…

密码学与安全 · 计算机科学 2021-07-23 Buse Gul Atli , Yuxi Xia , Samuel Marchal , N. Asokan

As microelectronics flourish and outsourcing of the design and manufacturing stages of integrated circuits (ICs) and printed circuit boards (PCBs) becomes the norm, microelectronics stakeholders must also confront a new wave of security…

密码学与安全 · 计算机科学 2026-04-23 Gijung Lee , Wavid Bowman , Olivia Dizon-Paradis , Reiner Dizon-Paradis , Ronald Wilson , Damon Woodard , Domenic Forte

Membership Inference Attacks have emerged as a dominant method for empirically measuring privacy leakage from machine learning models. Here, privacy is measured by the {\em{advantage}} or gap between a score or a function computed on the…

机器学习 · 计算机科学 2024-05-27 Ruihan Wu , Pengrun Huang , Kamalika Chaudhuri

Machine learning models are being used in an increasing number of critical applications; thus, securing their integrity and ownership is critical. Recent studies observed that adversarial training and watermarking have a conflicting…

机器学习 · 计算机科学 2024-01-09 Janvi Thakkar , Giulio Zizzo , Sergio Maffeis

With the broad application of deep neural networks, the necessity of protecting them as intellectual properties has become evident. Numerous watermarking schemes have been proposed to identify the owner of a deep neural network and verify…

密码学与安全 · 计算机科学 2021-08-23 Fang-Qi Li , Shi-Lin Wang , Alan Wee-Chung Liew

As Artificial Intelligence (AI) technologies continue to gain traction in the modern-day world, they ultimately pose an immediate threat to current cybersecurity systems via exploitative methods. Prompt engineering is a relatively new field…

密码学与安全 · 计算机科学 2023-12-05 Haiyan Xuan , Mohith Manohar

The commercialization of deep learning creates a compelling need for intellectual property (IP) protection. Deep neural network (DNN) watermarking has been proposed as a promising tool to help model owners prove ownership and fight piracy.…

机器学习 · 计算机科学 2021-02-16 Jia Guo , Miodrag Potkonjak

Generative audio models, based on diffusion and autoregressive architectures, have advanced rapidly in both quality and expressiveness. This progress, however, raises pressing copyright concerns, as such models are often trained on vast…

Training large language models (LLMs) is resource-intensive and expensive, making protecting intellectual property (IP) for LLMs crucial. Recently, embedding fingerprints into LLMs has emerged as a prevalent method for establishing model…

密码学与安全 · 计算机科学 2025-08-13 Jiaxuan Wu , Yinghan Zhou , Wanli Peng , Yiming Xue , Juan Wen , Ping Zhong

High-quality open-source datasets have emerged as a pivotal catalyst driving the swift advancement of deep learning, while facing the looming threat of potential exploitation. Protecting these datasets is of paramount importance for the…

计算机视觉与模式识别 · 计算机科学 2025-07-17 Yuechen Xie , Jie Song , Yicheng Shan , Xiaoyan Zhang , Yuanyu Wan , Shengxuming Zhang , Jiarui Duan , Mingli Song

The commercial use of Machine Learning (ML) is spreading; at the same time, ML models are becoming more complex and more expensive to train, which makes Intellectual Property Protection (IPP) of trained models a pressing issue. Unlike other…

机器学习 · 计算机科学 2023-04-27 Isabell Lederer , Rudolf Mayer , Andreas Rauber

The rapid growth of large language models raises pressing concerns about intellectual property protection under black-box deployment. Existing backdoor-based fingerprints either rely on rare tokens -- leading to high-perplexity inputs…

密码学与安全 · 计算机科学 2026-01-22 Zhenhua Xu , Yiran Zhao , Mengting Zhong , Dezhang Kong , Changting Lin , Tong Qiao , Meng Han

Fingerprinting large language models (LLMs) is essential for verifying model ownership, ensuring authenticity, and preventing misuse. Traditional fingerprinting methods often require significant computational overhead or white-box…

密码学与安全 · 计算机科学 2025-07-15 Jiacheng Cai , Jiahao Yu , Yangguang Shao , Yuhang Wu

The proliferation of large language models (LLMs) has intensified concerns over model theft and license violations, necessitating robust and stealthy ownership verification. Existing fingerprinting methods either require impractical…

密码学与安全 · 计算机科学 2025-09-04 Zhenhua Xu , Meng Han , Wenpeng Xing

Machine learning (ML) models have been shown to be vulnerable to Membership Inference Attacks (MIA), which infer the membership of a given data point in the target dataset by observing the prediction output of the ML model. While the key…

Machine learning (ML) models are applied in an increasing variety of domains. The availability of large amounts of data and computational resources encourages the development of ever more complex and valuable models. These models are…

密码学与安全 · 计算机科学 2021-12-09 Franziska Boenisch

Model Inversion (MI) attacks aim to reconstruct private training data by abusing access to machine learning models. Contemporary MI attacks have achieved impressive attack performance, posing serious threats to privacy. Meanwhile, all…

机器学习 · 计算机科学 2024-05-10 Sy-Tuyen Ho , Koh Jun Hao , Keshigeyan Chandrasegaran , Ngoc-Bao Nguyen , Ngai-Man Cheung

The ubiquity of deep neural networks (DNNs), cloud-based training, and transfer learning is giving rise to a new cybersecurity frontier in which unsecure DNNs have `structural malware' (i.e., compromised weights and activation pathways). In…

机器学习 · 计算机科学 2021-02-05 N. Benjamin Erichson , Dane Taylor , Qixuan Wu , Michael W. Mahoney

Recently, diffusion models have become popular tools for image synthesis because of their high-quality outputs. However, like other large-scale models, they may leak private information about their training data. Here, we demonstrate a…

机器学习 · 计算机科学 2023-12-11 Shuai Tang , Zhiwei Steven Wu , Sergul Aydore , Michael Kearns , Aaron Roth

This paper presents the first model extraction attack against Deep Reinforcement Learning (DRL), which enables an external adversary to precisely recover a black-box DRL model only from its interaction with the environment. Model extraction…

机器学习 · 计算机科学 2020-12-23 Kangjie Chen , Shangwei Guo , Tianwei Zhang , Xiaofei Xie , Yang Liu