A new piracy-resistant DNN watermarkingmethod based on secret key and block-wise imagetransformations
Research Square (Research Square)(2023)
摘要
Abstract In this paper, we propose a new DNN watermarking method that can be usedfor copyright protection of DNN models. This method utilizes learnable blockwiseimage transformation techniques and a secret key to embed watermarkinto a DNN model. Additionally, the method utilizes a black-box watermarkingapproach that does not require a specific predefined training set or triggerset, allowing remote verification of model ownership. Therefore, this method canachieve copyright protection for DNN models by authentication methods for DNNmodels. Experimental results on the CIFAR-10 dataset show that this method ispiracy-resistant and allows the trained DNN models to maintain a high level ofaccuracy in image classification.In addition,the original watermark is not easilyoverwritten by a pirated watermark, showing robustness against fine-tuning andpruning attacks.
更多查看译文
关键词
secret key,piracy-resistant,block-wise
AI 理解论文
溯源树
样例
![](https://originalfileserver.aminer.cn/sys/aminer/pubs/mrt_preview.jpeg)
生成溯源树,研究论文发展脉络
Chat Paper
正在生成论文摘要