Piracy Resistant Watermarks for Deep Neural Networks

Understand

As companies continue to invest heavily in larger, more accurate and more robust deep learning models, they are exploring approaches to monetize their models while protecting their intellectual property.

• Model licensing is promising, but requires a robust tool for owners to claim ownership of models, i.e.
• a watermark.
• Unfortunately, current designs have not been able to address piracy attacks, where third parties falsely claim model ownership by embedding their own "pirate watermarks" into an already-watermarked model.