ROSE: A RObust and SEcure DNN Watermarking. (arXiv:2206.11024v1 [cs.CR])

Web: http://arxiv.org/abs/2206.11024

Protecting the Intellectual Property rights of DNN models is of primary
importance prior to their deployment. So far, the proposed methods either
necessitate changes to internal model parameters or the machine learning
pipeline, or they fail to meet both the security and robustness requirements.
This paper proposes a lightweight, robust, and secure black-box DNN
watermarking protocol that takes advantage of cryptographic one-way functions
as well as the injection of in-task key image-label pairs during the training
process. These pairs are …

arxiv dnn