Wide Flat Minimum Watermarking for Robust Ownership Verification of GANs
Jianwei Fei, Zhihua Xia, Benedetta Tondi, Mauro Barni

TL;DR
This paper introduces a robust multi-bit watermarking technique for GANs that ensures ownership verification remains intact even after model modifications, by converging to a wide flat minimum of the watermarking loss.
Contribution
It proposes a novel watermarking method that embeds invisible watermarks in GANs and guarantees robustness through convergence to a wide flat minimum of the watermarking loss.
Findings
Watermark remains detectable after fine-tuning, pruning, and quantization.
The method does not significantly affect image quality.
It is applicable across various architectures and datasets.
Abstract
We propose a novel multi-bit box-free watermarking method for the protection of Intellectual Property Rights (IPR) of GANs with improved robustness against white-box attacks like fine-tuning, pruning, quantization, and surrogate model attacks. The watermark is embedded by adding an extra watermarking loss term during GAN training, ensuring that the images generated by the GAN contain an invisible watermark that can be retrieved by a pre-trained watermark decoder. In order to improve the robustness against white-box model-level attacks, we make sure that the model converges to a wide flat minimum of the watermarking loss term, in such a way that any modification of the model parameters does not erase the watermark. To do so, we add random noise vectors to the parameters of the generator and require that the watermarking loss term is as invariant as possible with respect to the presence…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdversarial Robustness in Machine Learning · Advanced Neural Network Applications · Advanced Steganography and Watermarking Techniques
