Towards Traitor Tracing in Black-and-White-Box DNN Watermarking with Tardos-based Codes. (arXiv:2307.06695v1 [cs.CR])

The growing popularity of Deep Neural Networks, which often require
computationally expensive training and access to a vast amount of data, calls
for accurate authorship verification methods to deter unlawful dissemination of
the models and identify the source of the leak. In DNN watermarking the owner
may have access to the full network (white-box) or only be able to extract
information from its output to queries (black-box), but a watermarked model may
include both approaches in order to gather sufficient …

access box data identify leak may networks neural networks tracing training vast verification watermarking