On the Robustness of Dataset Inference

Understand

Machine learning (ML) models are costly to train as they can require a significant amount of data, computational resources and technical expertise.

• Thus, they constitute valuable intellectual property that needs protection from adversaries wanting to steal them.
• Ownership verification techniques allow the victims of model stealing attacks to demonstrate that a suspect model was in fact stolen from theirs.
• Although a number of ownership verification techniques based on watermarking or fingerprinting have been proposed, most of them fall short either in terms of security guarantees (well-equipped adversaries can evade verification) or computational cost.