中文
相关论文

相关论文: NNSplitter: An Active Defense Solution for DNN Mod…

200 篇论文

A well-trained DNN model can be regarded as an intellectual property (IP) of the model owner. To date, many DNN IP protection methods have been proposed, but most of them are watermarking based verification methods where model owners can…

密码学与安全 · 计算机科学 2023-05-26 Mingfu Xue , Zhiyu Wu , Jian Wang , Yushu Zhang , Weiqiang Liu

The training of Deep Neural Networks (DNN) is costly, thus DNN can be considered as the intellectual properties (IP) of model owners. To date, most of the existing protection works focus on verifying the ownership after the DNN model is…

密码学与安全 · 计算机科学 2023-05-26 Mingfu Xue , Shichang Sun , Can He , Yushu Zhang , Jian Wang , Weiqiang Liu

Intellectual property (IP) protection for Deep Neural Networks (DNNs) has raised serious concerns in recent years. Most existing works embed watermarks in the DNN model for IP protection, which need to modify the model and lack of…

计算机视觉与模式识别 · 计算机科学 2025-03-04 Mingfu Xue , Xin Wang , Yinghao Wu , Shifeng Ni , Yushu Zhang , Weiqiang Liu

Well-performed deep neural networks (DNNs) generally require massive labelled data and computational resources for training. Various watermarking techniques are proposed to protect such intellectual properties (IPs), wherein the DNN…

计算机视觉与模式识别 · 计算机科学 2023-04-04 Xiangyu Wen , Yu Li , Wei Jiang , Qiang Xu

Neural networks (NNs) are already deployed in hardware today, becoming valuable intellectual property (IP) as many hours are invested in their training and optimization. Therefore, attackers may be interested in copying, reverse…

密码学与安全 · 计算机科学 2022-04-04 Mahdieh Grailoo , Zain Ul Abideen , Mairo Leier , Samuel Pagliarini

Training high performance Deep Neural Networks (DNNs) models require large-scale and high-quality datasets. The expensive cost of collecting and annotating large-scale datasets make the valuable datasets can be considered as the…

密码学与安全 · 计算机科学 2023-05-26 Mingfu Xue , Yinghao Wu , Yushu Zhang , Jian Wang , Weiqiang Liu

Deep neural networks (DNNs), such as the widely-used GPT-3 with billions of parameters, are often kept secret due to high training costs and privacy concerns surrounding the data used to train them. Previous approaches to securing DNNs…

密码学与安全 · 计算机科学 2024-06-24 Ning Lin , Shaocong Wang , Yue Zhang , Yangu He , Kwunhang Wong , Arindam Basu , Dashan Shang , Xiaoming Chen , Zhongrui Wang

Trained Deep Neural Network (DNN) models are considered valuable Intellectual Properties (IP) in several business models. Prevention of IP theft and unauthorized usage of such DNN models has been raised as of significant concern by…

机器学习 · 计算机科学 2024-02-20 Manaar Alam , Sayandeep Saha , Debdeep Mukhopadhyay , Sandip Kundu

Recently, how to protect the Intellectual Property (IP) of deep neural networks (DNN) becomes a major concern for the AI industry. To combat potential model piracy, recent works explore various watermarking strategies to embed secret…

密码学与安全 · 计算机科学 2022-05-20 Yifan Yan , Xudong Pan , Yining Wang , Mi Zhang , Min Yang

A deep neural network (DNN) classifier represents a model owner's intellectual property as training a DNN classifier often requires lots of resource. Watermarking was recently proposed to protect the intellectual property of DNN…

密码学与安全 · 计算机科学 2020-11-03 Xiaoyu Cao , Jinyuan Jia , Neil Zhenqiang Gong

Extracting the architecture of layers of a given deep neural network (DNN) through hardware-based side channels allows adversaries to steal its intellectual property and even launch powerful adversarial attacks on the target system. In this…

密码学与安全 · 计算机科学 2023-03-14 Mahya Morid Ahmadi , Lilas Alrahis , Ozgur Sinanoglu , Muhammad Shafique

The surge in popularity of machine learning (ML) has driven significant investments in training Deep Neural Networks (DNNs). However, these models that require resource-intensive training are vulnerable to theft and unauthorized use. This…

密码学与安全 · 计算机科学 2024-03-12 Jasper Stang , Torsten Krauß , Alexandra Dmitrienko

The training and creation of deep learning model is usually costly, thus it can be regarded as an intellectual property (IP) of the model creator. However, malicious users who obtain high-performance models may illegally copy, redistribute,…

密码学与安全 · 计算机科学 2022-07-05 Mingfu Xue , Yushu Zhang , Jian Wang , Weiqiang Liu

Training a deep neural network (DNN) requires a high computational cost. Buying models from sellers with a large number of computing resources has become prevailing. However, the buyer-seller environment is not always trusted. To protect…

密码学与安全 · 计算机科学 2023-12-12 Yusheng Guo , Nan Zhong , Zhenxing Qian , Xinpeng Zhang

We describe a threat model under which a split network-based federated learning system is susceptible to a model inversion attack by a malicious computational server. We demonstrate that the attack can be successfully performed with limited…

机器学习 · 计算机科学 2021-04-22 Tom Titcombe , Adam J. Hall , Pavlos Papadopoulos , Daniele Romanini

Despite the tremendous success, deep neural networks are exposed to serious IP infringement risks. Given a target deep model, if the attacker knows its full information, it can be easily stolen by fine-tuning. Even if only its output is…

计算机视觉与模式识别 · 计算机科学 2021-03-09 Jie Zhang , Dongdong Chen , Jing Liao , Weiming Zhang , Huamin Feng , Gang Hua , Nenghai Yu

Recently, deep neural networks (DNNs) have been deployed in safety-critical systems such as autonomous vehicles and medical devices. Shortly after that, the vulnerability of DNNs were revealed by stealthy adversarial examples where crafted…

密码学与安全 · 计算机科学 2021-12-28 Behnam Ghavami , Seyd Movi , Zhenman Fang , Lesley Shannon

Recent advancements of Deep Neural Networks (DNNs) have seen widespread deployment in multiple security-sensitive domains. The need of resource-intensive training and use of valuable domain-specific training data have made these models a…

密码学与安全 · 计算机科学 2021-11-09 Adnan Siraj Rakin , Md Hafizul Islam Chowdhuryy , Fan Yao , Deliang Fan

Copyright protection for deep neural networks (DNNs) is an urgent need for AI corporations. To trace illegally distributed model copies, DNN watermarking is an emerging technique for embedding and verifying secret identity messages in the…

密码学与安全 · 计算机科学 2023-03-20 Yifan Yan , Xudong Pan , Mi Zhang , Min Yang

Deep neural networks (DNNs) have already achieved great success in a lot of application areas and brought profound changes to our society. However, it also raises new security problems, among which how to protect the intellectual property…

密码学与安全 · 计算机科学 2022-11-02 Hanzhou Wu
‹ 上一页 1 2 3 10 下一页 ›