Timezone: »

 
Poster
Margin-based Neural Network Watermarking
Byungjoo Kim · Suyoung Lee · Seanie Lee · Son · Sung Ju Hwang

Tue Jul 25 02:00 PM -- 04:30 PM (PDT) @ Exhibit Hall 1 #527
in Poster Session 1 »

As Machine Learning as a Service (MLaaS) platforms become prevalent, deep neural network (DNN) watermarking techniques are gaining increasing attention, which enables one to verify the ownership of a target DNN model in a black-box scenario. Unfortunately, previous watermarking methods are vulnerable to functionality stealing attacks, thus allowing an adversary to falsely claim the ownership of a DNN model stolen from its original owner. In this work, we propose a novel margin-based DNN watermarking approach that is robust to the functionality stealing attacks based on model extraction and distillation. Specifically, during training, our method maximizes the margins of watermarked samples by using projected gradient ascent on them so that their predicted labels cannot change without compromising the accuracy of the model that the attacker tries to steal. We validate our method on multiple benchmarks and show that our watermarking method successfully defends against model extraction attacks, outperforming recent baselines.

[ PDF] 

Author Information

Byungjoo Kim (Korea Advanced Institute of Science and Technology)
Suyoung Lee (KAIST)
Seanie Lee (KAIST)
Son
Sung Ju Hwang (UNIST)

More from the Same Authors