Abstract:In recent years, many model intellectual property (IP) proof methods for IP protection have been proposed, such as model watermarking and model fingerprinting. However, with the increasing number of models transmitted and deployed on the Internet, quickly finding the suspect model among thousands of models on model-sharing platforms such as GitHub is in great demand, which concurrently triggers the new security problem of model copy detection for IP protection. As an important part of the model IP protection system, the model copy detection task has not received enough attention. Due to the high computational complexity, both model watermarking and model fingerprinting lack the capability to efficiently find suspected infringing models among tens of millions of models. In this article, inspired by the hash-based image retrieval methods, we introduce a novel model copy detection mechanism: perceptual hashing for convolutional neural networks (CNNs). The proposed perceptual hashing algorithm can convert the weights of CNNs to fixed-length binary hash codes so that the lightly modified version has the similar hash code as the original model. By comparing the similarity of a pair of hash codes between a query model and a test model in the model library, similar versions of a query model can be retrieved efficiently. To the best of our knowledge, this is the first perceptual hashing algorithm for deep neural network models. Specifically, we first select the important model weights based on the model compression theory, then calculate the normal test statistics (NTS) on the segments of important weights, and finally encode the NTS features into hash codes. The experiment performed on a model library containing 3,565 models indicates that our perceptual hashing scheme has a superior copy detection performance.

Deep Perceptual Hash Based on Hash Center for Image Copyright Protection

Secure and robust image perceptual hashing

Evade Deep Image Retrieval by Stashing Private Images in the Hash Space.

Deep Hashing with Top Similarity Preserving for Image Retrieval

Perceptual Image Hashing for Content Authentication Based on Convolutional Neural Network With Multiple Constraints

Perceptual Hashing of Deep Convolutional Neural Networks for Model Copy Detection

A Dct-Vq Based Multipurpose Image Hashing Scheme For Copyright Protection And Content Authentication

Multipurpose Image Hashing Based On Multistage Vector Quantization

Deep Subject-Sensitive Hashing Network for High-Resolution Remote Sensing Image Integrity Authentication

Perceptual Hashing with Deep and Texture Features

Robust Image Hashing for Image Authentication Based on DCT-DWT Composite Domain

A Novel Block-DCT and PCA Based Image Perceptual Hashing Algorithm

Learning to Break Deep Perceptual Hashing: The Use Case NeuralHash

Depth Image Hashing Algorithm Based on Local Global Feature Fusion

Robust Hashing with Deep Features and Meixner Moments for Image Copy Detection

Research on Robust Image Perceptual Hashing Technology Based on Discrete Cosine Transform

Defending Against Adversarial Examples Using Perceptual Image Hashing

RevHashNet: Perceptually De-Hashing Real-Valued Image Hashes for Similarity Retrieval.

CNN Feature-Based Image Copy Detection with Contextual Hash Embedding

Supervised Hash Coding with Deep Neural Network for Environment Perception of Intelligent Vehicles