Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors

Satoru Koda, Ikuya Morikawa

Deep neural networks (DNNs) deployed in a cloud often allow users to query models via the APIs. However, these APIs expose the models to model extraction attacks (MEAs). In this at…