Awesome DNN Watermarking

This Github repo collects helpful resources we found pertaining to the research topic DNN Watermarking.

Table of Contents

• Survey
• Toolbox
• Dissertation and Thesis
• Supervised Learning (Image classification))
• Diffusion Model
• Generative Adversarial Network

Survey

• A survey of deep neural network watermarking techniques [pdf]

  • Li, Yue, Hongxia Wang, and Mauro Barni. Neurocomputing, Elsevier, 2021

• A Systematic Review on Model Watermarking for Neural Networks [link]

  • Boenisch, Franziska. Frontiers in big Data, 2021

• Deep Intellectual Property: A Survey [pdf]

  • Sun, Yuchen, Tianpeng Liu, Panhe Hu, Qing Liao, Shouling Ji, Nenghai Yu, Deke Guo, and Li Liu. arXiv preprint, 2023

• I Know What You Trained Last Summer A Survey on Stealing Machine Learning Models and Defences [pdf]

  • Oliynyk, Daryna, Rudolf Mayer, and Andreas Rauber. ACM Computing Surveys, 2023

• Intellectual Property Protection for Deep Learning Models Taxonomy, Methods, Attacks, and Evaluations [pdf]

  • Xue, Mingfu, Yushu Zhang, Jian Wang, and Weiqiang Liu. IEEE Transactions on Artificial Intelligence, 2021

Toolbox

• Watermark-Robustness-Toolbox
• ml-model-watermarking
• model-watermarking

Dissertation and Thesis

Year	Degree	University	Paper
2022	Ph.D.	UCSD	Towards Holistic Secure and Trustworthy Deep Learning
2020	Master	Skolkovo Institute of Science and Technology	Developing a watermarking method for deep neural networks with no extra training

Supervised Learning (Image classification)

Year	Venue	Paper	Code
2024	S&P	MEA-Defender: A Robust Watermark against Model Extraction Attack
2023	NeurIPS	Domain Watermark Effective and Harmless Dataset Copyright Protection is Closed at Hand
2023	ICML	Trapdoor Normalization with Irreversible Ownership Verification
2023	TDSC	RemovalNet: DNN Fingerprint Removal Attacks
2022	ICML	Certified Neural Network Watermarks with Randomized Smoothing
2022	CVPR	Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations
2022	S&P	Copy, Right A Testing Framework for Copyright Protection of Deep Learning Models
2022	ICLR	Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization
2021	ACM MM	DAWN Dynamic Adversarial Watermarking of Neural Networks
2021	ICLR	Deep Neural Network Fingerprinting by Conferrable Adversarial Examples
2021	USENIX	Entangled Watermarks as a Defense against Model Extraction
2018	AsiaCCS	Protecting Intellectual Property of Deep Neural Networks with Watermarking

Diffusion Model

Year	Venue	Paper	Code
2023	NeurIPS	Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robust
2023	arXiv	A Recipe for Watermarking Diffusion Models
2023	arXiv	Watermarking Diffusion Model
2023	arXiv	DiffusionShield: A Watermark for Copyright Protection against Generative Diffusion Models

Generative Adversarial Network

Year	Venue	Paper	Code
2021	CVPR	Protecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attacks
2022	ICLR	Responsible Disclosure of Generative Models Using Scalable Fingerprinting