SecureNet:基于后门学习的DNN的主动知识产权保护和模型安全防御
Peihao Li1, Jie Huang2, Huaqing Wu3
1Southeast University, Nanjing, 211189, Jiangsu, China.
概括
SecureNet引入了一种基于密钥的新型框架,用于在深度神经网络 (DNN) 中保护知识产权. 这种主动方法使用许可证密钥来控制模型访问,并防御各种攻击,增强DNN安全性.
科学领域:
- 计算机科学 计算机科学
- 人工智能的人工智能
- 机器学习安全 机器学习安全
背景情况:
- 深度神经网络 (DNN) 越来越容易受到隐私侵犯和知识产权 (IP) 盗窃的影响.
- 现有的水印技术提供了被动保护,无法防止未经授权的模型使用或贪污.
- 积极的保护方法对于保护DNN模型免受侵权至关重要.
研究的目的:
- 提出SecureNet,一个基于密钥的访问许可框架,用于DNN模型的主动知识产权保护.
- 开发许可证密钥注入,更换和细粒度用户授权的机制.
- 在SecureNet框架内设计防御对抗和后门攻击.
主要方法:
- 实现了一个基于密钥的访问许可框架 (SecureNet),使用后门学习嵌入许可证密钥.
- 开发了一个许可证密钥更换算法,以确保DNN模型的可重复使用性.
- 设计防御机制,以抵御对手和后门攻击,并结合细粒度的授权.
主要成果:
- 与最先进的模型参数加密相比,SecureNet显示出更高的计算效率 (超过95%的改进).
- 该框架有效地抵御了对抗性和后门攻击,而不会降低整体模型性能.
- 在各种数据集 (MNIST,Cifar10/100,FaceScrub,CelebA) 和模型 (LeNet-5,VGG16,ResNet18/101,NFNet-F5,MobileNetV3) 上进行评估.
结论:
- SecureNet为主动DNN知识产权保护提供了强大而高效的解决方案.
- 基于密钥的框架通过控制访问和防御恶意攻击来增强模型安全性.
- SecureNet提供灵活的授权,并保持模型性能,使其适合各种应用.
相关概念视频
Defense Mechanism Against Infection
Natural flora, body system defenses, and inflammation are natural barriers of the body against infectious agents regardless of previous exposure. Normal floras of the human body refer to the microbial population that colonizes the skin and mucous membranes.
In addition, many body organ systems have unique defenses against infection. The skin is an intact, multilayered surface preventing invasion by microorganisms unless impaired. Mucous membranes lining the mouth, nose, and eyelids are barriers...
In addition, many body organ systems have unique defenses against infection. The skin is an intact, multilayered surface preventing invasion by microorganisms unless impaired. Mucous membranes lining the mouth, nose, and eyelids are barriers...
Masking and Demasking Agents
EDTA titrations may necessitate masking and demasking agents to temporarily protect a particular metal ion in a mixture from the EDTA reaction. These agents facilitate the sequential analysis of the metal ions by forming stable complexes with some—but not all—metal ions during certain steps.
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on the metal...
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on the metal...
Defense Against Bacterial Pathogens
The human immune system is a complex network of cells, tissues, and organs that work together to defend the body against bacterial infections. It consists of various immune cells, each playing a specific role in the defense mechanism.
Phagocytes
Phagocytes are the frontline soldiers of the immune system. They include neutrophils and macrophages. Neutrophils are the most abundant type of white blood cell and are quickly mobilized to the site of infection. Macrophages are larger cells that patrol...
Phagocytes
Phagocytes are the frontline soldiers of the immune system. They include neutrophils and macrophages. Neutrophils are the most abundant type of white blood cell and are quickly mobilized to the site of infection. Macrophages are larger cells that patrol...
Endospores and Sporulation
Endospores are specialized, dormant cells primarily formed by Gram-positive bacteria, including Bacillus and Clostridium, enabling survival under extreme environmental conditions. Due to their unique composition and formation process, these structures are highly resistant to physical and chemical insults, such as extreme heat, ultraviolet and ionizing radiation, desiccation, and toxic chemicals. Rare instances of endospore-like structures have also been observed in some Gram-negative bacteria,...
Net Change Theorem
The Net Change Theorem is a fundamental principle in calculus that establishes a direct relationship between a function’s rate of change and its accumulated change over an interval. Mathematically, it states that the definite integral of a function's derivative over a given interval [a,b] yields the net change in the original function:This theorem has significant applications in various real-world scenarios, including physics, economics, and engineering. A particularly useful application is in...


