Abstract:Recently, the intellectual properties (IP) protection of deep neural networks (DNN) has attracted serious concerns. A number of DNN copyright protection methods have been proposed. However, most of the existing DNN watermarking methods can only verify the ownership of the model after the piracy occurs, which cannot actively prevent the occurrence of the piracy and do not support users' identities management, thus can not satisfy the requirements of commercial DNN copyright management. In addition, the query modification attack which was proposed recently can invalidate most of the existing backdoor-based DNN watermarking methods. In this paper, we propose an active intellectual properties protection technique for DNN models via stealthy backdoor and users' identities authentication. For the first time, we use a set of clean images (as the watermark key samples) to embed an additional class into the DNN for ownership verification, and use the image steganography to embed users' identity information into these watermark key images. Each user will be assigned with a unique identity image for identity authentication and authorization control. Since the backdoor instances are clean images outside the dataset, the backdoor trigger is visually imperceptible and concealed. In addition, we embed the watermark by exploiting an additional class outside the main tasks, which establishes a strong connection for watermark key samples and the corresponding label. As a result, the proposed method is concealed, robust, and can resist common attacks and query modification attack. Experimental results demonstrate that, the proposed method can obtain 100% watermark accuracy and 100% fingerprint authentication success rate on Fashion-MNIST and CIFAR-10 datasets. In addition, the proposed method is demonstrated to be robust against the model fine-tuning attack, model pruning attack, and query modification attack. Compared with three existing DNN watermarking methods, the proposed method has better performance on watermark accuracy and robustness against the query modification attack.

Watermarks for Generative Adversarial Network Based on Steganographic Invisible Backdoor.

A Novel Model Watermarking for Protecting Generative Adversarial Network

Active intellectual property protection for deep neural networks through stealthy backdoor and users’ identities authentication

A Novel Grayscale Image Steganography via Generative Adversarial Network

On the Robustness of the Backdoor-based Watermarking in Deep Neural Networks

Robust Image Watermarking Based on Generative Adversarial Network

Protecting the Intellectual Properties of Deep Neural Networks with an Additional Class and Steganographic Images

Invisible Image Watermarks Are Provably Removable Using Generative AI

Generating Image Adversarial Examples by Embedding Digital Watermarks

Unambiguous and High-Fidelity Backdoor Watermarking for Deep Neural Networks

Digital Forensics and Watermarking - 18th International Workshop, IWDW 2019, Chengdu, China, November 2-4, 2019, Revised Selected Papers

Generative Model Watermarking Suppressing High-Frequency Artifacts

Solving the Capsulation Attack against Backdoor-based Deep Neural Network Watermarks by Reversing Triggers

Invisible Backdoor Attacks on Deep Neural Networks via Steganography and Regularization

Generative adversarial networks model for visible watermark removal.

Concealed Attack for Robust Watermarking Based on Generative Model and Perceptual Loss

High invisibility image steganography with wavelet transform and generative adversarial network

A New Steganography Without Embedding Based on Adversarial Training

Wide Flat Minimum Watermarking for Robust Ownership Verification of GANs

Removing Backdoor-Based Watermarks in Neural Networks with Limited Data.