ChainMarks: Securing DNN Watermark with Cryptographic Chain
Brian Choi, Shu Wang, Isabelle Choi, Kun Sun

TL;DR
ChainMarks introduces a cryptographic chain-based DNN watermarking scheme that enhances robustness and security, utilizing a two-phase Monte Carlo method for more accurate watermark verification and ownership proof.
Contribution
The paper presents a novel cryptographic chain approach for DNN watermarking combined with a two-phase Monte Carlo verification, improving robustness and security over existing methods.
Findings
ChainMarks outperforms state-of-the-art watermarking schemes in robustness.
It provides higher probability guarantees of watermark presence.
The scheme effectively resists watermark removal and ambiguity attacks.
Abstract
With the widespread deployment of deep neural network (DNN) models, dynamic watermarking techniques are being used to protect the intellectual property of model owners. However, recent studies have shown that existing watermarking schemes are vulnerable to watermark removal and ambiguity attacks. Besides, the vague criteria for determining watermark presence further increase the likelihood of such attacks. In this paper, we propose a secure DNN watermarking scheme named ChainMarks, which generates secure and robust watermarks by introducing a cryptographic chain into the trigger inputs and utilizes a two-phase Monte Carlo method for determining watermark presence. First, ChainMarks generates trigger inputs as a watermark dataset by repeatedly applying a hash function over a secret key, where the target labels associated with trigger inputs are generated from the digital signature of…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
