Removing Backdoor-Based Watermarks in Neural Networks with Limited Data

S. Lawrence, C. L. Giles, A. C. Tsoi, and A. D. Back, “Face recognition: A convolutional neural-network approach,” IEEE transactions on neural networks , vol. 8, no. 1, pp. 98–113, 1997

1997

Earlier work this paper cites.

Y. LeCun, L. Bottou, Y. Bengio, and P. Haffner, “Gradient-based learning applied to document recognition,” Proceedings of the IEEE , vol. 86, no. 11, pp. 2278–2324, 1998

1998

Earlier work this paper cites.

A. Toshev and C. Szegedy, “Deeppose: Human pose estimation via deep neural networks,” in Proceedings of the IEEE conference on computer vision and pattern recognition , 2014, pp. 1653–1660

2014

Earlier work this paper cites.

D. Bahdanau, K. Cho, and Y. Bengio, “Neural machine translation by jointly learning to align and translate,” arXiv preprint arXiv:1409.0473 , 2014

Original

2014

Earlier work this paper cites.

M. Ribeiro, K. Grolinger, and M. A. Capretz, “Mlaas: Machine learning as a service,” in 2015 IEEE 14th International Conference on Machine Learning and Applications (ICMLA) . IEEE, 2015, pp. 896–902

2015

Earlier work this paper cites.

D. Amodei, S. Ananthanarayanan, R. Anubhai, J. Bai, E. Battenberg, C. Case, J. Casper, B. Catanzaro, Q. Cheng, G. Chen et al. , “Deep speech 2: End-to-end speech recognition in english and mandarin,” in International conference on machine learning , 2016, pp. 173–182

2016

Earlier work this paper cites.

L. E. Li, E. Chen, J. Hermann, P. Zhang, and L. Wang, “Scaling machine learning as a service,” in International Conference on Predictive Applications and APIs , 2017, pp. 14–29

2017

Earlier work this paper cites.

A. P. Tafti, E. LaRose, J. C. Badger, R. Kleiman, and P. Peissig, “Machine learning-as-a-service and its application to medical informatics,” in International Conference on Machine Learning and Data Mining in Pattern Recognition . Springer, 2017, pp. 206–219

2017

Earlier work this paper cites.

Y. Uchida, Y. Nagai, S. Sakazawa, and S. Satoh, “Embedding watermarks into deep neural networks,” in Proceedings of the 2017 ACM on International Conference on Multimedia Retrieval , 2017, pp. 269–277

2017

Earlier work this paper cites.

J. Kirkpatrick, R. Pascanu, N. C. Rabinowitz, J. Veness, G. Desjardins, A. A. Rusu, K. Milan, J. Quan, T. Ramalho, A. Grabskabarwinska et al. , “Overcoming catastrophic forgetting in neural networks,” Proceedings of the National Academy of Sciences of the United States of America , vol. 114, no. 13, pp. 3521–3526, 2017

2017

Earlier work this paper cites.

X. Chen, C. Liu, B. Li, K. Lu, and D. Song, “Targeted backdoor attacks on deep learning systems using data poisoning,” arXiv: Cryptography and Security , 2017

2017

Cited alongside, same era.

T. Gu, B. Dolan-Gavitt, and S. Garg, “Badnets: Identifying vulnerabilities in the machine learning model supply chain,” arXiv preprint arXiv:1708.06733 , 2017

Original

2017

Cited alongside, same era.

Y. Liu, S. Ma, Y. Aafer, W.-C. Lee, J. Zhai, W. Wang, and X. Zhang, “Trojaning attack on neural networks,” 2017

2017

Cited alongside, same era.

N. Baracaldo, B. Chen, H. Ludwig, and J. A. Safavi, “Mitigating poisoning attacks on machine learning models: A data provenance based approach,” in Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security , 2017, pp. 103–110

2017

Cited alongside, same era.

D. Hitaj and L. V. Mancini, “Have you stolen my model? evasion attacks against deep neural network watermarking techniques,” arXiv preprint arXiv:1809.00615 , 2018

Original

2018

Later among the works it cites.

E. Le Merrer, P. Perez, and G. Trédan, “Adversarial frontier stitching for remote neural network watermarking,” Neural Computing and Applications , pp. 1–12, 2019

2019

Later among the works it cites.

X. Chen, W. Wang, Y. Ding, C. Bender, R. Jia, B. Li, and D. Song, “Leveraging unlabeled data for watermark removal of deep neural networks,” in ICML workshop on Security and Privacy of Machine Learning , 2019

2019

Later among the works it cites.

X. Chen, W. Wang, C. Bender, Y. Ding, R. Jia, B. Li, and D. Song, “Refit: a unified watermark removal framework for deep learning systems with limited data,” arXiv: Cryptography and Security , 2019

2019

Later among the works it cites.