Chao Guo

Backdoor-free model watermarking via differential verification of adversarial samples and multi-bit information extraction

Model watermarking is a commonly used ownership verification technique for protecting the copyright of deep learning models. However, in practically deployed black-box model service scenarios, existing methods typically rely on misclassification-based backdoor trigger mechanisms, or assume that the verifier can obtain...