深度模型水印

Deep model watermarking

深度神经网络模型凝结了设计者的智慧,需要消耗大量数据和计算资源,是人工智能技术的重要产出物,已被广泛应用于生产和生活当中。然而,作为一种数字产品,如何保护深度神经网络模型免于被非法复制、分发或滥用(即知识产权保护)是人工智能产业化进程中必须面临和解决的难题。文章主要介绍基于数字水印的深度模型产权保护技术,通过总结深度模型水印的发展现状,对深度模型水印的研究趋势进行展望。

Deep neural networks(DNNs)condense the wisdom of the designer and consume a lot of data and computing resources.It is an important artificial intelligence technology,and is widely applied in our daily life.However,as a digital asset,how to protect DNN models from being illegally copied,distributed or abused(that is,intellectual property protection)is a difficult problem that must be faced and solved in the process of artificial intelligence industrialization.This article reviews digital watermarking techniques for intellectual property protection of DNN models.By summarizing the development status of deep model watermarking,the research trend of deep model watermarking is further prospected.