A systematic review on model watermarking for neural networks

F Boenisch - Frontiers in big Data, 2021 - frontiersin.org
Machine learning (ML) models are applied in an increasing variety of domains. The
availability of large amounts of data and computational resources encourages the …

Data and model poisoning backdoor attacks on wireless federated learning, and the defense mechanisms: A comprehensive survey

Y Wan, Y Qu, W Ni, Y Xiang, L Gao… - … Surveys & Tutorials, 2024 - ieeexplore.ieee.org
Due to the greatly improved capabilities of devices, massive data, and increasing concern
about data privacy, Federated Learning (FL) has been increasingly considered for …

Backdoor learning: A survey

Y Li, Y Jiang, Z Li, ST Xia - IEEE Transactions on Neural …, 2022 - ieeexplore.ieee.org
Backdoor attack intends to embed hidden backdoors into deep neural networks (DNNs), so
that the attacked models perform well on benign samples, whereas their predictions will be …

Sok: How robust is image classification deep neural network watermarking?

N Lukas, E Jiang, X Li… - 2022 IEEE Symposium on …, 2022 - ieeexplore.ieee.org
Deep Neural Network (DNN) watermarking is a method for provenance verification of DNN
models. Watermarking should be robust against watermark removal attacks that derive a …

Certified neural network watermarks with randomized smoothing

A Bansal, P Chiang, MJ Curry, R Jain… - International …, 2022 - proceedings.mlr.press
Watermarking is a commonly used strategy to protect creators' rights to digital images,
videos and audio. Recently, watermarking methods have been extended to deep learning …

Riga: Covert and robust white-box watermarking of deep neural networks

T Wang, F Kerschbaum - Proceedings of the Web Conference 2021, 2021 - dl.acm.org
Watermarking of deep neural networks (DNN) can enable their tracing once released by a
data owner to an online platform. In this paper, we generalize white-box watermarking …

Rethinking {White-Box} Watermarks on Deep Learning Models under Neural Structural Obfuscation

Y Yan, X Pan, M Zhang, M Yang - 32nd USENIX Security Symposium …, 2023 - usenix.org
Copyright protection for deep neural networks (DNNs) is an urgent need for AI corporations.
To trace illegally distributed model copies, DNN watermarking is an emerging technique for …

Intellectual property protection for deep learning models: Taxonomy, methods, attacks, and evaluations

M Xue, Y Zhang, J Wang, W Liu - IEEE Transactions on Artificial …, 2021 - ieeexplore.ieee.org
The training and creation of deep learning model is usually costly, thus the trained model
can be regarded as an intellectual property (IP) of the model creator. However, malicious …

Deep intellectual property protection: A survey

Y Sun, T Liu, P Hu, Q Liao, S Fu, N Yu, D Guo… - arXiv preprint arXiv …, 2023 - arxiv.org
Deep Neural Networks (DNNs), from AlexNet to ResNet to ChatGPT, have made
revolutionary progress in recent years, and are widely used in various fields. The high …

ModelDiff: Testing-based DNN similarity comparison for model reuse detection

Y Li, Z Zhang, B Liu, Z Yang, Y Liu - Proceedings of the 30th ACM …, 2021 - dl.acm.org
The knowledge of a deep learning model may be transferred to a student model, leading to
intellectual property infringement or vulnerability propagation. Detecting such knowledge …