Protecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attack
arXiv:2102.04362
Abstract
Ever since Machine Learning as a Service (MLaaS) emerges as a viable business that utilizes deep learning models to generate lucrative revenue, Intellectual Property Right (IPR) has become a major concern because these deep learning models can easily be replicated, shared, and re-distributed by any unauthorized third parties. To the best of our knowledge, one of the prominent deep learning models - Generative Adversarial Networks (GANs) which has been widely used to create photorealistic image are totally unprotected despite the existence of pioneering IPR protection methodology for Convolutional Neural Networks (CNNs). This paper therefore presents a complete protection framework in both black-box and white-box settings to enforce IPR protection on GANs. Empirically, we show that the proposed method does not compromise the original GANs performance (i.e. image generation, image super-resolution, style transfer), and at the same time, it is able to withstand both removal and ambiguity attacks against embedded watermarks.
arXiv commentAccepted at CVPR2021
References in corpus (7)
- Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networks
- Generative Adversarial Networks: An Overview
- GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibrium
- Embedding Watermarks into Deep Neural Networks
- Adversarial Frontier Stitching for Remote Neural Network Watermarking
- A Robust Blind Watermarking Using Convolutional Neural Network
- DeepSigns: A Generic Watermarking Framework for IP Protection of Deep Learning Models