Protecting ownership rights of ML models using watermarking in the light of adversarial attacks
Résumé
In this paper, we present and analyze two novel - and seem- ingly distant - research trends in Machine Learning: ML wa- termarking and adversarial patches. First, we show how ML watermarking uses specially crafted inputs to provide a proof of model ownership. Second, we demonstrate how an attacker can craft adversarial samples in order to trigger an abnormal behavior in a model and thus perform an ambiguity attack on ML watermarking. Finally, we describe three countermea- sures that could be applied in order to prevent ambiguity at- tacks. We illustrate our works using the example of a binary classification model for welding inspection.
Fichier principal
Protecting_ownership_rights_of_ML_models_using_watermarking_in_the_light_of_adversarial_attacks.pdf (1.65 Mo)
Télécharger le fichier
Origine | Fichiers produits par l'(les) auteur(s) |
---|---|
Licence |
Copyright (Tous droits réservés)
|