MOVE:通过嵌入式外部功能进行有效和无害的所有权验证.
概括
本研究介绍了一种新型模型所有权验证 (MOVE) 技术,用于打击深度神经网络 (DNN) 模型盗窃. MOVE通过检测嵌入式外部功能来有效验证所有权,保护知识产权.
科学领域:
- 计算机科学 计算机科学
- 人工智能的人工智能
- 机器学习安全 机器学习安全
背景情况:
- 深度神经网络 (DNN) 是有价值的知识产权,由于广泛的培训资源.
- 模型窃取攻击构成重大威胁,允许对手创建DNN的功能副本.
- 现有的防御可能会引入新的安全风险,或对不同类型的攻击失败.
研究的目的:
- 提出一种有效且无害的模型所有权验证 (MOVE) 方法.
- 在不引入新的漏洞的情况下,同时防御各种模型窃取技术.
- 保护训练有素的DNN模型的知识产权.
主要方法:
- 在训练样本中嵌入防守者指定的外部特征,使用风格转移.
- 训练元分类器以基于嵌入式知识的存在来识别被盗模型.
- 为玻璃盒和封闭盒场景开发和分析MOVE方法.
主要成果:
- 拟议的MOVE方法在验证模型所有权方面表现出有效性.
- 实验证实了该方法对不同模型窃取攻击的稳定性.
- 移动显示了对潜在的适应性攻击的抵抗力,确保了全面的保护.
结论:
- 移动为DNN模型所有权验证提供安全有效的解决方案.
- 该技术通过验证嵌入式外部功能,成功检测被盗模型.
- MOVE提供了一种有前途的方法来保护机器学习中的知识产权.
相关概念视频
Labeling DNA Probes
8.1K
DNA probes are fragments of DNA labeled with a reporter tag to enable their detection or purification. The resulting labeled DNA probes can then hybridize to target nucleic acid sequences through complementary base-pairing, and may be used to recover or identify these regions.
Radioisotopes, fluorophores, or small molecule binding partners like biotin or digoxigenin, are the most widely used reporter tags for labeling DNA probes. These labels can be attached to the probe DNA molecule via...
Radioisotopes, fluorophores, or small molecule binding partners like biotin or digoxigenin, are the most widely used reporter tags for labeling DNA probes. These labels can be attached to the probe DNA molecule via...
8.1K
Second Uniqueness Theorem
957
Consider a region consisting of several individual conductors with a definite charge density in the region between these conductors. The second uniqueness theorem states that if the total charge on each conductor and the charge density in the in-between region are known, then the electric field can be uniquely determined.
In contrast, consider that the electric field is non-unique and apply Gauss's law in divergence form in the region between the conductors and the integral form to the...
In contrast, consider that the electric field is non-unique and apply Gauss's law in divergence form in the region between the conductors and the integral form to the...
957
Contact-dependent Signaling
44.3K
Contact-dependent signaling, as the name suggests, requires that communicating cells be in direct contact with each other. This is achieved either through receptor-ligand interactions or by specialized cytoplasmic channels that allow the flow of small molecules between cells. In animal cells, channels called gap junctions facilitate contact-dependent signaling in certain tissues, whereas, plasmodesmata perform a similar function in plants.
Gap Junctions
In animal cells, gap junctions are formed...
Gap Junctions
In animal cells, gap junctions are formed...
44.3K
Transducer Mechanism: Enzyme-Linked Receptors
2.3K
Enzyme-linked receptors are cell-surface receptors acting as an enzyme or associating with an enzyme intracellularly. They make excellent drug targets. Drugs can bind to the extracellular ligand-binding domain or directly affect their enzymatic domain and alter their activity.
Major types that are helpful drug targets include:
Major types that are helpful drug targets include:
2.3K
Enzyme-Linked Immunosorbent Assay
12.4K
In 1971, Peter Perlman and Eva Engvall developed an Enzyme-linked immunosorbent assay (ELISA or EIA). ELISA differs from western blot in that the assays are conducted in microtiter plates or in vivo rather than on an absorbent membrane.
There are many different types of ELISAs, but they all involve an antibody molecule whose constant region binds an enzyme, leaving the variable region free to bind its specific antigen. Enzyme-substrate reaction allows the antigen to be visualized or...
There are many different types of ELISAs, but they all involve an antibody molecule whose constant region binds an enzyme, leaving the variable region free to bind its specific antigen. Enzyme-substrate reaction allows the antigen to be visualized or...
12.4K
Exon Recombination
3.5K
The evolution of new genes is critical for speciation. Exon recombination, also known as exon shuffling or domain shuffling, is an important means of new gene formation. It is observed across vertebrates, invertebrates, and in some plants such as potatoes and sunflowers. During exon recombination, exons from the same or different genes recombine and produce new exon-intron combinations, which might evolve into new genes.
Exon shuffling follows “splice frame rules.” Each exon...
Exon shuffling follows “splice frame rules.” Each exon...
3.5K


