Digital Watermarking for Machine Learning Model : Techniques, Protocols and Applications

Fan, Lixin (EDT)/ Chan, Chee Seng (EDT)/ Yang, Qiang (EDT)

Springer Verlag, Singapore（2024/05発売）

• 製本 Paperback:紙装版/ペーパーバック版／ページ数 225 p.
• 言語 ENG
• 商品コード 9789811975561
• DDC分類 005.82

Full Description

Machine learning (ML) models, especially large pretrained deep learning (DL) models, are of high economic value and must be properly protected with regard to intellectual property rights (IPR).  Model watermarking methods are proposed to embed watermarks into the target model, so that, in the event it is stolen, the model's owner can extract the pre-defined watermarks to assert ownership. Model watermarking methods adopt frequently used techniques like backdoor training, multi-task learning, decision boundary analysis etc. to generate secret conditions that constitute model watermarks or fingerprints only known to model owners. These methods have little or no effect on model performance, which makes them applicable to a wide variety of contexts.  In terms of robustness, embedded watermarks must be robustly detectable against varying adversarial attacks that attempt to remove the watermarks. The efficacy of model watermarking methods is showcased in diverse applications including image classification, image generation, image captions, natural language processing and reinforcement learning.  

This book covers the motivations, fundamentals, techniques and protocols for protecting ML models using watermarking.  Furthermore, it showcases cutting-edge work in e.g. model watermarking, signature and passport embedding and their use cases in distributed federated learning settings.

Contents

Part I. Preliminary.- Chapter 1. Introduction.- Chapter 2. Ownership Verification Protocols for Deep Neural Network Watermarks.- Part II Techniques.- Chapter 3. ModelWatermarking for Image Recovery DNNs.- Chapter 4. The Robust and Harmless ModelWatermarking.- Chapter 5. Protecting Intellectual Property of Machine Learning Models via Fingerprinting the Classification Boundary.- Chapter 6. Protecting Image Processing Networks via Model Water.- Chapter 7. Watermarks for Deep Reinforcement Learning.- Chapter 8. Ownership Protection for Image Captioning Models.- Chapter 9.Protecting Recurrent Neural Network by Embedding Key.- Part III Applications.- Chapter 10. FedIPR: Ownership Verification for Federated Deep Neural Network Models.- Chapter 11. Model Auditing For Data Intellectual Property