ActiveGuard: An Active DNN IP Protection Technique via Adversarial Examples

Understand

The training of Deep Neural Networks (DNN) is costly, thus DNN can be considered as the intellectual properties (IP) of model owners.

• To date, most of the existing protection works focus on verifying the ownership after the DNN model is stolen, which cannot resist piracy in advance.
• To this end, we propose an active DNN IP protection method based on adversarial examples against DNN piracy, named ActiveGuard.
• ActiveGuard aims to achieve authorization control and users' fingerprints management through adversarial examples, and can provide ownership verification.