Evolutionary Trigger Set Generation for DNN Black-Box Watermarking

R. Storn and K. V. Price, “Differential evolution - A simple and efficient heuristic for global optimization over continuous spaces,” J. Global Optimization

1997

Earlier work this paper cites.

A. B. Kahng, J. Lach, W. H. Mangione-Smith, S. Mantik, I. L. Markov, M. Potkonjak, P. Tucker, H. Wang, and G. Wolfe, “Watermarking techniques for intellectual property protection,” in Proceedings of the 35th Conference on Design Automation

1998

Earlier work this paper cites.

C. S. Collberg and C. D. Thomborson, “Software watermarking: Models and dynamic embeddings,” in Proceedings of the 26th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages

1999

Earlier work this paper cites.

I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples,” CoRR

Original

2014

Earlier work this paper cites.

A. Nguyen, J. Yosinski, and J. Clune, “Deep neural networks are easily fooled: High confidence predictions for unrecognizable images,” in IEEE Conference on Computer Vision and Pattern Recognition

2015

Earlier work this paper cites.

N. Papernot, P. D. McDaniel, S. Jha, M. Fredrikson, Z. B. Celik, and A. Swami, “The limitations of deep learning in adversarial settings,” in IEEE European Symposium on Security and Privacy

2016

Earlier work this paper cites.

Y. Uchida, Y. Nagai, S. Sakazawa, and S. Satoh, “Embedding watermarks into deep neural networks,” in Proceedings of ACM International Conference on Multimedia Retrieval

2017

Cited alongside, same era.

E. L. Merrer, P. Perez, and G. Trédan, “Adversarial frontier stitching for remote neural network watermarking,” CoRR

Original

2017

Cited alongside, same era.

N. Carlini and D. A. Wagner, “Towards evaluating the robustness of neural networks,” in 2017 IEEE Symposium on Security and Privacy

2017

Cited alongside, same era.

J. Su, D. V. Vargas, and K. Sakurai, “One pixel attack for fooling deep neural networks,” CoRR

Original

2017

Cited alongside, same era.

S. Moosavi-Dezfooli, A. Fawzi, O. Fawzi, and P. Frossard, “Universal adversarial perturbations,” in 2017 IEEE Conference on Computer Vision and Pattern Recognition

B. D. Rohani, H. Chen, and F. Koushanfar, “Deepsigns: A generic watermarking framework for ip protection of deep learning models,” CoRR

Original

2018

Later among the works it cites.

J. Zhang, Z. Gu, J. Jang, H. Wu, M. P. Stoecklin, H. Huang, and I. Molloy, “Protecting intellectual property of deep neural networks with watermarking,” in Proceedings of the 2018 on Asia Conference on Computer and Communications Security

2018

Later among the works it cites.

J. Guo and M. Potkonjak, “Watermarking deep neural networks for embedded systems,” in Proceedings of the International Conference on Computer-Aided Design

2018

Later among the works it cites.

A. Ilyas, L. Engstrom, A. Athalye, and J. Lin, “Black-box adversarial attacks with limited queries and information,” in Proceedings of the 35th International Conference on Machine Learning

2018

Later among the works it cites.