中文
相关论文

相关论文: Bounding-box Watermarking: Defense against Model E…

200 篇论文

Deep learning has achieved tremendous success in numerous industrial applications. As training a good model often needs massive high-quality data and computation resources, the learned models often have significant business values. However,…

多媒体 · 计算机科学 2020-02-26 Jie Zhang , Dongdong Chen , Jing Liao , Han Fang , Weiming Zhang , Wenbo Zhou , Hao Cui , Nenghai Yu

A watermarking algorithm is proposed in this paper to address the copyright protection issue of implicit 3D models. The algorithm involves embedding watermarks into the images in the training set through an embedding network, and…

密码学与安全 · 计算机科学 2023-09-22 Lifeng Chen , Jia Liu , Yan Ke , Wenquan Sun , Weina Dong , Xiaozhong Pan

Creating a state-of-the-art deep-learning system requires vast amounts of data, expertise, and hardware, yet research into embedding copyright protection for neural networks has been limited. One of the main methods for achieving such…

密码学与安全 · 计算机科学 2020-04-27 William Aiken , Hyoungshick Kim , Simon Woo

Model Extraction Attacks (MEAs) threaten modern machine learning systems by enabling adversaries to steal models, exposing intellectual property and training data. With the increasing deployment of machine learning models in distributed…

密码学与安全 · 计算机科学 2025-02-25 Kaixiang Zhao , Lincan Li , Kaize Ding , Neil Zhenqiang Gong , Yue Zhao , Yushun Dong

Model extraction attacks aim to replicate the functionality of a black-box model through query access, threatening the intellectual property (IP) of machine-learning-as-a-service (MLaaS) providers. Defending against such attacks is…

密码学与安全 · 计算机科学 2025-06-04 Xueqi Cheng , Minxing Zheng , Shixiang Zhu , Yushun Dong

We present a novel defense, against backdoor attacks on Deep Neural Networks (DNNs), wherein adversaries covertly implant malicious behaviors (backdoors) into DNNs. Our defense falls within the category of post-development defenses that…

密码学与安全 · 计算机科学 2023-10-06 Tinghao Xie , Xiangyu Qi , Ping He , Yiming Li , Jiachen T. Wang , Prateek Mittal

Recently, how to protect the Intellectual Property (IP) of deep neural networks (DNN) becomes a major concern for the AI industry. To combat potential model piracy, recent works explore various watermarking strategies to embed secret…

密码学与安全 · 计算机科学 2022-05-20 Yifan Yan , Xudong Pan , Yining Wang , Mi Zhang , Min Yang

Deep neural networks (DNNs) have long been recognized as vulnerable to backdoor attacks. By providing poisoned training data in the fine-tuning process, the attacker can implant a backdoor into the victim model. This enables input samples…

密码学与安全 · 计算机科学 2024-09-10 Abdullah Arafat Miah , Yu Bi

Server breaches are an unfortunate reality on today's Internet. In the context of deep neural network (DNN) models, they are particularly harmful, because a leaked model gives an attacker "white-box" access to generate adversarial examples,…

密码学与安全 · 计算机科学 2022-10-18 Shawn Shan , Wenxin Ding , Emily Wenger , Haitao Zheng , Ben Y. Zhao

To ensure the responsible distribution and use of open-source deep neural networks (DNNs), DNN watermarking has become a crucial technique to trace and verify unauthorized model replication or misuse. In practice, black-box watermarks…

密码学与安全 · 计算机科学 2026-02-04 Huming Qiu , Mi Zhang , Junjie Sun , Peiyi Chen , Xiaohan Zhang , Min Yang

Deep Neural Networks (DNNs) have gained considerable traction in recent years due to the unparalleled results they gathered. However, the cost behind training such sophisticated models is resource intensive, resulting in many to consider…

机器学习 · 计算机科学 2025-05-12 Anh Tu Ngo , Chuan Song Heng , Nandish Chattopadhyay , Anupam Chattopadhyay

Embedding as a Service (EaaS) has become a widely adopted solution, which offers feature extraction capabilities for addressing various downstream tasks in Natural Language Processing (NLP). Prior studies have shown that EaaS can be prone…

密码学与安全 · 计算机科学 2024-06-11 Anudeex Shetty , Yue Teng , Ke He , Qiongkai Xu

Deep neural networks (DNNs) are vulnerable to backdoor attacks, where adversaries embed a hidden backdoor trigger during the training process for malicious prediction manipulation. These attacks pose great threats to the applications of…

密码学与安全 · 计算机科学 2023-02-21 Junfeng Guo , Yiming Li , Xun Chen , Hanqing Guo , Lichao Sun , Cong Liu

Deep learning has revolutionized numerous tasks within the computer vision field, including image classification, image segmentation, and object detection. However, the increasing deployment of deep learning models has exposed them to…

计算机视觉与模式识别 · 计算机科学 2026-01-28 Zeineb Dridi , Jihen Bennaceur , Amine Ben Hassouna

Deep neural networks (DNNs) have achieved tremendous success in many tasks of machine learning, such as the image classification. Unfortunately, researchers have shown that DNNs are easily attacked by adversarial examples, slightly…

计算机视觉与模式识别 · 计算机科学 2017-11-17 Yujia Liu , Weiming Zhang , Shaohua Li , Nenghai Yu

Machine learning (ML) models have significantly grown in complexity and utility, driving advances across multiple domains. However, substantial computational resources and specialized expertise have historically restricted their wide…

密码学与安全 · 计算机科学 2025-08-28 Kaixiang Zhao , Lincan Li , Kaize Ding , Neil Zhenqiang Gong , Yue Zhao , Yushun Dong

Machine learning involves expensive data collection and training procedures. Model owners may be concerned that valuable intellectual property can be leaked if adversaries mount model extraction attacks. As it is difficult to defend against…

密码学与安全 · 计算机科学 2021-02-22 Hengrui Jia , Christopher A. Choquette-Choo , Varun Chandrasekaran , Nicolas Papernot

Despite the tremendous success, deep neural networks are exposed to serious IP infringement risks. Given a target deep model, if the attacker knows its full information, it can be easily stolen by fine-tuning. Even if only its output is…

计算机视觉与模式识别 · 计算机科学 2021-03-09 Jie Zhang , Dongdong Chen , Jing Liao , Weiming Zhang , Huamin Feng , Gang Hua , Nenghai Yu

Graph Neural Networks (GNNs) are widely deployed in industry, making their intellectual property valuable. However, protecting GNNs from unauthorized use remains a challenge. Watermarking offers a solution by embedding ownership information…

密码学与安全 · 计算机科学 2026-05-12 Jane Downer , Yingdan Shi , Ziyan Liu , Ren Wang , Binghui Wang

Deep neural network (DNN) watermarking is a suitable method for protecting the ownership of deep learning (DL) models. It secretly embeds an identifier (watermark) within the model, which can be retrieved by the owner to prove ownership. In…

密码学与安全 · 计算机科学 2025-05-20 Reda Bellafqira , Gouenou Coatrieux