中文
相关论文

相关论文: Bounding-box Watermarking: Defense against Model E…

200 篇论文

Recently, machine learning (ML) has introduced advanced solutions to many domains. Since ML models provide business advantage to model owners, protecting intellectual property of ML models has emerged as an important consideration.…

机器学习 · 计算机科学 2020-05-28 Buse Gul Atli , Sebastian Szyller , Mika Juuti , Samuel Marchal , N. Asokan

Backdoor attacks pose a serious threat to deep neural networks (DNNs), allowing adversaries to implant triggers for hidden behaviors in inference. Defending against such vulnerabilities is especially difficult in the post-training setting,…

密码学与安全 · 计算机科学 2026-04-14 Weijun Li , Ansh Arora , Xuanli He , Mark Dras , Qiongkai Xu

Backdoor attacks represent a subtle yet effective class of cyberattacks targeting AI models, primarily due to their stealthy nature. The model behaves normally on clean data but exhibits malicious behavior only when the attacker embeds a…

机器学习 · 计算机科学 2025-09-29 Sujeevan Aseervatham , Achraf Kerzazi , Younès Bennani

The rise of Machine Learning as a Service (MLaaS) has led to the widespread deployment of machine learning models trained on diverse datasets. These models are employed for predictive services through APIs, raising concerns about the…

密码学与安全 · 计算机科学 2024-03-28 Mahendra Gurve , Sankar Behera , Satyadev Ahlawat , Yamuna Prasad

Out-of-distribution (OOD) detection aims to identify OOD data based on representations extracted from well-trained deep models. However, existing methods largely ignore the reprogramming property of deep models and thus may not fully…

机器学习 · 计算机科学 2022-10-28 Qizhou Wang , Feng Liu , Yonggang Zhang , Jing Zhang , Chen Gong , Tongliang Liu , Bo Han

The huge supporting training data on the Internet has been a key factor in the success of deep learning models. However, this abundance of public-available data also raises concerns about the unauthorized exploitation of datasets for…

密码学与安全 · 计算机科学 2023-04-11 Ruixiang Tang , Qizhang Feng , Ninghao Liu , Fan Yang , Xia Hu

Deep neural networks (DNNs) are known vulnerable to backdoor attacks, a training time attack that injects a trigger pattern into a small proportion of training data so as to control the model's prediction at the test time. Backdoor attacks…

机器学习 · 计算机科学 2021-01-28 Yige Li , Xixiang Lyu , Nodens Koren , Lingjuan Lyu , Bo Li , Xingjun Ma

The challenge of WAD (web attack detection) is growing as hackers continuously refine their methods to evade traditional detection. Deep learning models excel in handling complex unknown attacks due to their strong generalization and…

机器学习 · 计算机科学 2024-06-19 Lijia Shi , Shihao Dong

Due to the wide use of highly-valuable and large-scale deep neural networks (DNNs), it becomes crucial to protect the intellectual property of DNNs so that the ownership of disputed or stolen DNNs can be verified. Most existing solutions…

密码学与安全 · 计算机科学 2021-03-26 Peizhuo Lv , Pan Li , Shengzhi Zhang , Kai Chen , Ruigang Liang , Yue Zhao , Yingjiu Li

Deep Neural Networks (DNNs) have attracted significant attention, and their internal models are now considered valuable intellectual assets. Extracting such a model via oracle access to a DNN is conceptually similar to extracting a secret…

机器学习 · 计算机科学 2026-03-30 Akira Ito , Takayuki Miura , Yosuke Todo

Recent research has shown Deep Neural Networks (DNNs) to be vulnerable to adversarial examples that induce desired misclassifications in the models. Such risks impede the application of machine learning in security-sensitive domains.…

机器学习 · 计算机科学 2021-03-23 Raj Vardhan , Ninghao Liu , Phakpoom Chinprutthiwong , Weijie Fu , Zhenyu Hu , Xia Ben Hu , Guofei Gu

With the increasing prevalence of Machine Learning as a Service (MLaaS) platforms, there is a growing focus on deep neural network (DNN) watermarking techniques. These methods are used to facilitate the verification of ownership for a…

密码学与安全 · 计算机科学 2024-07-19 Yuxuan Li , Sarthak Kumar Maharana , Yunhui Guo

Deep neural networks (DNNs) are vulnerable to a class of attacks called "backdoor attacks", which create an association between a backdoor trigger and a target label the attacker is interested in exploiting. A backdoored DNN performs well…

计算机视觉与模式识别 · 计算机科学 2023-01-23 Hasan Abed Al Kader Hammoud , Shuming Liu , Mohammed Alkhrashi , Fahad AlBalawi , Bernard Ghanem

Deep learning has been achieving top performance in many tasks. Since training of a deep learning model requires a great deal of cost, we need to treat neural network models as valuable intellectual properties. One concern in such a…

密码学与安全 · 计算机科学 2019-01-21 Ryota Namba , Jun Sakuma

The deep neural network (DNN) models are deemed confidential due to their unique value in expensive training efforts, privacy-sensitive training data, and proprietary network characteristics. Consequently, the model value raises incentive…

密码学与安全 · 计算机科学 2022-08-30 Zhendong Wang , Xiaoming Zeng , Xulong Tang , Danfeng Zhang , Xing Hu , Yang Hu

The rise of machine learning as a service and model sharing platforms has raised the need of traitor-tracing the models and proof of authorship. Watermarking technique is the main component of existing methods for protecting copyright of…

密码学与安全 · 计算机科学 2019-06-17 Ziqi Yang , Hung Dang , Ee-Chien Chang

While machine learning (ML) models are being increasingly trusted to make decisions in different and varying areas, the safety of systems using such models has become an increasing concern. In particular, ML models are often trained on data…

Utilization of Machine Learning (ML) algorithms, especially Deep Neural Network (DNN) models, becomes a widely accepted standard in many domains more particularly IoT-based systems. DNN models reach impressive performances in several…

密码学与安全 · 计算机科学 2021-05-05 Raphaël Joud , Pierre-Alain Moellic , Rémi Bernhard , Jean-Baptiste Rigaud

With the widespread deployment of deep neural network (DNN) models, dynamic watermarking techniques are being used to protect the intellectual property of model owners. However, recent studies have shown that existing watermarking schemes…

密码学与安全 · 计算机科学 2025-06-04 Brian Choi , Shu Wang , Isabelle Choi , Kun Sun

Deep neural networks (DNNs) have been shown to be vulnerable against adversarial examples (AEs) which are maliciously designed to fool target models. The normal examples (NEs) added with imperceptible adversarial perturbation, can be a…

计算机视觉与模式识别 · 计算机科学 2022-08-31 Mingyu Dong , Jiahao Chen , Diqun Yan , Jingxing Gao , Li Dong , Rangding Wang