Regulating Ownership Verification for Deep Neural Networks: Scenarios, Protocols, and Prospects

Abstract

With the broad application of deep neural networks, the necessity of protecting them as intellectual properties has become evident. Numerous watermarking schemes have been proposed to identify the owner of a deep neural network and verify the ownership. However, most of them focused on the watermark embedding rather than the protocol for provable verification. To bridge the gap between those proposals and real-world demands, we study the deep learning model intellectual property protection in three scenarios: the ownership proof, the federated learning, and the intellectual property transfer. We present three protocols respectively. These protocols raise several new requirements for the bottom-level watermarking schemes.

arXiv commentIJCAI 2021 Workshop on Toward IPR on Deep Learning as Services

References in corpus (5)

• Embedding Watermarks into Deep Neural Networks
• Piracy Resistant Watermarks for Deep Neural Networks
• Performance Comparison of Contemporary DNN Watermarking Techniques
• Secure Watermark for Deep Neural Networks with Multi-task Learning
• Towards Practical Watermark for Deep Neural Networks in Federated Learning