Title | Protecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attacks |
Publication Type | Conference Paper |
Year of Publication | 2021 |
Authors | Ong, Ding Sheng, Seng Chan, Chee, Ng, Kam Woh, Fan, Lixin, Yang, Qiang |
Conference Name | 2021 IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) |
Keywords | composability, Computer vision, Deep Learning, image synthesis, intellectual property, intellectual property security, Knowledge engineering, policy-based governance, pubcrawl, resilience, Resiliency, Superresolution, Watermarking |
Abstract | Ever since Machine Learning as a Service emerges as a viable business that utilizes deep learning models to generate lucrative revenue, Intellectual Property Right (IPR) has become a major concern because these deep learning models can easily be replicated, shared, and re-distributed by any unauthorized third parties. To the best of our knowledge, one of the prominent deep learning models - Generative Adversarial Networks (GANs) which has been widely used to create photorealistic image are totally unprotected despite the existence of pioneering IPR protection methodology for Convolutional Neural Networks (CNNs). This paper therefore presents a complete protection framework in both black-box and white-box settings to enforce IPR protection on GANs. Empirically, we show that the proposed method does not compromise the original GANs performance (i.e. image generation, image super-resolution, style transfer), and at the same time, it is able to withstand both removal and ambiguity attacks against embedded watermarks. Codes are available at https://github.com/dingsheng-ong/ipr-gan. |
DOI | 10.1109/CVPR46437.2021.00363 |
Citation Key | ong_protecting_2021 |