Visible to the public Protecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attacks

TitleProtecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attacks
Publication TypeConference Paper
Year of Publication2021
AuthorsOng, Ding Sheng, Seng Chan, Chee, Ng, Kam Woh, Fan, Lixin, Yang, Qiang
Conference Name2021 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR)
Keywordscomposability, Computer vision, Deep Learning, image synthesis, intellectual property, intellectual property security, Knowledge engineering, policy-based governance, pubcrawl, resilience, Resiliency, Superresolution, Watermarking
AbstractEver since Machine Learning as a Service emerges as a viable business that utilizes deep learning models to generate lucrative revenue, Intellectual Property Right (IPR) has become a major concern because these deep learning models can easily be replicated, shared, and re-distributed by any unauthorized third parties. To the best of our knowledge, one of the prominent deep learning models - Generative Adversarial Networks (GANs) which has been widely used to create photorealistic image are totally unprotected despite the existence of pioneering IPR protection methodology for Convolutional Neural Networks (CNNs). This paper therefore presents a complete protection framework in both black-box and white-box settings to enforce IPR protection on GANs. Empirically, we show that the proposed method does not compromise the original GANs performance (i.e. image generation, image super-resolution, style transfer), and at the same time, it is able to withstand both removal and ambiguity attacks against embedded watermarks. Codes are available at https://github.com/dingsheng-ong/ipr-gan.
DOI10.1109/CVPR46437.2021.00363
Citation Keyong_protecting_2021