Alert button

DeepStego: Protecting Intellectual Property of Deep Neural Networks by Steganography

Add code
Bookmark button
Alert button
Mar 13, 2019
Zheng Li, Ge Han, Shanqing Guo, Chengyu Hu

Figure 1 for DeepStego: Protecting Intellectual Property of Deep Neural Networks by Steganography
Figure 2 for DeepStego: Protecting Intellectual Property of Deep Neural Networks by Steganography
Figure 3 for DeepStego: Protecting Intellectual Property of Deep Neural Networks by Steganography
Figure 4 for DeepStego: Protecting Intellectual Property of Deep Neural Networks by Steganography

Share this with someone who'll enjoy it:

Twitter IconFacebook IconLinkedin IconWhatsapp IconMessenger Icon

Deep Neural Networks (DNNs) has shown great success in various challenging tasks. Training these networks is computationally expensive and requires vast amounts of training data. Therefore, it is necessary to design a technology to protect the intellectual property (IP) of the model and externally verify the ownership of the model in a black-box way. Previous studies either fail to meet the black-box requirement or have not dealt with several forms of security and legal problems. In this paper, we firstly propose a novel steganographic scheme for watermarking Deep Neural Networks in the process of training. This scheme is the first feasible scheme to protect DNNs which perfectly solves the problems of safety and legality. We demonstrate experimentally that such a watermark has no obvious influence on the main task of model design and can successfully verify the ownership of the model. Furthermore, we show a rather robustness by simulating our scheme in a real situation.

* Some experiments need to be done  
View paper onarxiv icon

Share this with someone who'll enjoy it:

Twitter IconFacebook IconLinkedin IconWhatsapp IconMessenger Icon