Anti-Neuron Watermarking: Protecting Personal Data Against Unauthorized Neural Networks. (arXiv:2109.09023v2 [cs.CR] UPDATED)

We study protecting a user's data (images in this work) against a learner's
unauthorized use in training neural networks. It is especially challenging when
the user's data is only a tiny percentage of the learner's complete training
set. We revisit the traditional watermarking under modern deep learning
settings to tackle the challenge. We show that when a user watermarks images
using a specialized linear color transformation, a neural network classifier
will be imprinted with the signature so that a third-party …

arxiv data networks neural networks neuron personal data