中文
相关论文

相关论文: OVLA: Neural Network Ownership Verification using …

200 篇论文

Watermarking enables GenAI providers to verify whether content was generated by their models. A watermark is a hidden signal in the content, whose presence can be detected using a secret watermark key. A core security threat are forgery…

密码学与安全 · 计算机科学 2026-05-12 Toluwani Aremu , Noor Hussein , Munachiso Nwadike , Samuele Poppi , Jie Zhang , Karthik Nandakumar , Neil Gong , Nils Lukas

Detecting whether copyright holders' works were used in LLM pretraining is poised to be an important problem. This work proposes using data watermarks to enable principled detection with only black-box model access, provided that the…

密码学与安全 · 计算机科学 2024-08-20 Johnny Tian-Zheng Wei , Ryan Yixiang Wang , Robin Jia

The prosperity of deep neural networks (DNNs) is largely benefited from open-source datasets, based on which users can evaluate and improve their methods. In this paper, we revisit backdoor-based dataset ownership verification (DOV), which…

计算机视觉与模式识别 · 计算机科学 2023-11-07 Junfeng Guo , Yiming Li , Lixu Wang , Shu-Tao Xia , Heng Huang , Cong Liu , Bo Li

Machine learning (ML) models are applied in an increasing variety of domains. The availability of large amounts of data and computational resources encourages the development of ever more complex and valuable models. These models are…

密码学与安全 · 计算机科学 2021-12-09 Franziska Boenisch

Being trained on large and vast datasets, visual foundation models (VFMs) can be fine-tuned for diverse downstream tasks, achieving remarkable performance and efficiency in various computer vision applications. The high computation cost of…

计算机视觉与模式识别 · 计算机科学 2025-10-07 Anna Chistyakova , Mikhail Pautov

With the proliferation of AI agents in various domains, protecting the ownership of AI models has become crucial due to the significant investment in their development. Unauthorized use and illegal distribution of these models pose serious…

计算机视觉与模式识别 · 计算机科学 2025-01-14 Erjin Bao , Ching-Chun Chang , Hanrui Wang , Isao Echizen

Deep learning techniques have made tremendous progress in a variety of challenging tasks, such as image recognition and machine translation, during the past decade. Training deep neural networks is computationally expensive and requires…

密码学与安全 · 计算机科学 2019-11-11 Zheng Li , Chengyu Hu , Yang Zhang , Shanqing Guo

The intellectual property of deep neural network (DNN) models can be protected with DNN watermarking, which embeds copyright watermarks into model parameters (white-box), model behavior (black-box), or model outputs (box-free), and the…

密码学与安全 · 计算机科学 2025-07-25 Haonan An , Guang Hua , Yu Guo , Hangcheng Cao , Susanto Rahardja , Yuguang Fang

Deep neural networks are vulnerable to malicious fine-tuning attacks such as data poisoning and backdoor attacks. Therefore, in recent research, it is proposed how to detect malicious fine-tuning of neural network models. However, it…

计算机视觉与模式识别 · 计算机科学 2024-12-10 Zhaoxia Yin , Heng Yin , Xinpeng Zhang

With substantial amount of time, resources and human (team) efforts invested to explore and develop successful deep neural networks (DNN), there emerges an urgent need to protect these inventions from being illegally copied, redistributed,…

密码学与安全 · 计算机科学 2019-11-05 Lixin Fan , Kam Woh Ng , Chee Seng Chan

The huge supporting training data on the Internet has been a key factor in the success of deep learning models. However, this abundance of public-available data also raises concerns about the unauthorized exploitation of datasets for…

密码学与安全 · 计算机科学 2023-04-11 Ruixiang Tang , Qizhang Feng , Ninghao Liu , Fan Yang , Xia Hu

As machine- and AI-generated content proliferates, protecting the intellectual property of generative models has become imperative, yet verifying data ownership poses formidable challenges, particularly in cases of unauthorized reuse of…

机器学习 · 计算机科学 2024-02-28 Aditya Desu , Xuanli He , Qiongkai Xu , Wei Lu

Deep neural networks (DNNs) rely heavily on high-quality open-source datasets (e.g., ImageNet) for their success, making dataset ownership verification (DOV) crucial for protecting public dataset copyrights. In this paper, we find existing…

机器学习 · 计算机科学 2025-06-17 Ting Qiao , Yiming Li , Jianbin Li , Yingjia Wang , Leyi Qi , Junfeng Guo , Ruili Feng , Dacheng Tao

Substantial research works have shown that deep models, e.g., pre-trained models, on the large corpus can learn universal language representations, which are beneficial for downstream NLP tasks. However, these powerful models are also…

密码学与安全 · 计算机科学 2024-07-16 Yixin Liu , Hongsheng Hu , Xun Chen , Xuyun Zhang , Lichao Sun

Despite the tremendous success, deep neural networks are exposed to serious IP infringement risks. Given a target deep model, if the attacker knows its full information, it can be easily stolen by fine-tuning. Even if only its output is…

计算机视觉与模式识别 · 计算机科学 2021-03-09 Jie Zhang , Dongdong Chen , Jing Liao , Weiming Zhang , Huamin Feng , Gang Hua , Nenghai Yu

As valuable digital assets, deep neural networks necessitate robust ownership protection, positioning neural network watermarking (NNW) as a promising solution. Among various NNW approaches, weight-based methods are favored for their…

密码学与安全 · 计算机科学 2025-11-27 Yuan Yao , Jin Song , Jian Jin

In this paper, we propose a novel framework for ownership verification of deep neural network (DNN) models for image classification tasks. It allows verification of model identity by both the rightful owner and third party without…

机器学习 · 计算机科学 2025-07-31 Teruki Sano , Minoru Kuribayashi , Masao Sakai , Shuji Isobe , Eisuke Koizumi

Watermarking of deep neural networks (DNNs) has gained significant traction in recent years, with numerous (watermarking) strategies being proposed as mechanisms that can help verify the ownership of a DNN in scenarios where these models…

密码学与安全 · 计算机科学 2024-06-04 Giulio Pagnotta , Dorjan Hitaj , Briland Hitaj , Fernando Perez-Cruz , Luigi V. Mancini

Data watermarking in language models injects traceable signals, such as specific token sequences or stylistic patterns, into copyrighted text, allowing copyright holders to track and verify training data ownership. Previous data…

密码学与安全 · 计算机科学 2025-07-29 Xinyue Cui , Johnny Tian-Zheng Wei , Swabha Swayamdipta , Robin Jia

Deep Neural Networks have recently gained lots of success after enabling several breakthroughs in notoriously challenging problems. Training these networks is computationally expensive and requires vast amounts of training data. Selling…

机器学习 · 计算机科学 2018-06-12 Yossi Adi , Carsten Baum , Moustapha Cisse , Benny Pinkas , Joseph Keshet