8 citations · 18 across the 5 of their papers we have counts for
Showing 2022Show all
3 papers · 1 filter
stat.ML2022
Matryoshka: Stealing Functionality of Private ML Data by Hiding Models in Model
Xudong Pan, Yifan Yan, Shengyao Zhang +2
In this paper, we present a novel insider attack called Matryoshka, which employs an irrelevant scheduled-to-publish DNN model as a carrier model for covert transmission of multipl…
cs.CR2022★ 2 cited
Cracking White-box DNN Watermarks via Invariant Neuron Transforms
Yifan Yan, Xudong Pan, Yining Wang +2
Recently, how to protect the Intellectual Property (IP) of deep neural networks (DNN) becomes a major concern for the AI industry. To combat potential model piracy, recent works ex…
cs.CR2022
MetaV: A Meta-Verifier Approach to Task-Agnostic Model Fingerprinting
Xudong Pan, Yifan Yan, Mi Zhang +1
For model piracy forensics, previous model fingerprinting schemes are commonly based on adversarial examples constructed for the owner's model as the \textit{fingerprint}, and veri…