Detect and remove watermark in deep neural networks via generative adversarial networks

Y. LeCun, L. Bottou, Y. Bengio, and P. Haffner, “Gradient-based learning applied to document recognition,” Proceedings of the IEEE , vol. 86, no. 11, pp. 2278–2324, 1998

1998

Earlier work this paper cites.

A. Krizhevsky, G. Hinton et al. , “Learning multiple layers of features from tiny images,” Technical Report, 2009

2009

Earlier work this paper cites.

L. Deng, “The MNIST database of handwritten digit images for machine learning research [best of the web],” IEEE Signal Processing Magazine , vol. 29, no. 6, pp. 141–142, 2012

2012

Earlier work this paper cites.

I. J. Goodfellow, J. Pouget-Abadie, M. Mirza, B. Xu, D. Warde-Farley, S. Ozair, A. C. Courville, and Y. Bengio, “Generative adversarial nets,” in Advances in Neural Information Processing Systems , 2014, pp. 2672–2680

2014

Earlier work this paper cites.

M. Ribeiro, K. Grolinger, and M. A. M. Capretz, “MLaaS: Machine learning as a service,” in 14th IEEE International Conference on Machine Learning and Applications , 2015, pp. 896–902

2015

Earlier work this paper cites.

F. Tramèr, F. Zhang, A. Juels, M. K. Reiter, and T. Ristenpart, “Stealing machine learning models via prediction APIs,” in 25th USENIX Security Symposium , 2016, pp. 601–618

2016

Earlier work this paper cites.

K. He, X. Zhang, S. Ren, and J. Sun, “Deep residual learning for image recognition,” in IEEE Conference on Computer Vision and Pattern Recognition , 2016, pp. 770–778

2016

Earlier work this paper cites.

Y. Uchida, Y. Nagai, S. Sakazawa, and S. Satoh, “Embedding watermarks into deep neural networks,” in Proceedings of the ACM on International Conference on Multimedia Retrieval , 2017, pp. 269–277

2017

Cited alongside, same era.

Y. Adi, C. Baum, M. Cissé, B. Pinkas, and J. Keshet, “Turning your weakness into a strength: Watermarking deep neural networks by backdooring,” in 27th USENIX Security Symposium , 2018, pp. 1615–1631

2018

Cited alongside, same era.

J. Zhang, Z. Gu, J. Jang, H. Wu, M. P. Stoecklin, H. Huang, and I. M. Molloy, “Protecting intellectual property of deep neural networks with watermarking,” in Proceedings of the Asia Conference on Computer and Communications Security , 2018, pp. 159–172

2018

Cited alongside, same era.

C. Xiao, B. Li, J. Zhu, W. He, M. Liu, and D. Song, “Generating adversarial examples with adversarial networks,” in Proceedings of the 27th International Joint Conference on Artificial Intelligence , 2018, pp. 3905–3911

2018

Cited alongside, same era.

Z. Yang, H. Dang, and E. Chang, “Effectiveness of distillation attack and countermeasure on neural network watermarking,” arXiv:1906.06046 , 2019

Original

2019

Later among the works it cites.

B. Wang, Y. Yao, S. Shan, H. Li, B. Viswanath, H. Zheng, and B. Y. Zhao, “Neural cleanse: Identifying and mitigating backdoor attacks in neural networks,” in IEEE Symposium on Security and Privacy , 2019, pp. 707–723

2019

Later among the works it cites.

E. L. Merrer, P. Pérez, and G. Trédan, “Adversarial frontier stitching for remote neural network watermarking,” Neural Computing and Applications , vol. 32, no. 13, pp. 9233–9244, 2020

2020

Later among the works it cites.

X. Liu, F. Li, B. Wen, and Q. Li, “Removing backdoor-based watermarks in neural networks with limited data,” in 25th International Conference on Pattern Recognition , 2020, pp. 10 149–10 156

2020

Later among the works it cites.