{"id":"W2952348804","doi":"10.1145/3437880.3460401","title":"On the Robustness of Backdoor-based Watermarking in Deep Neural Networks","year":2021,"lang":"en","type":"preprint","venue":"","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":26,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Backdoor; Digital watermarking; Watermark; Robustness (evolution); Computer science; Deep learning; Black box; Artificial neural network; Artificial intelligence; White box; Deep neural networks; Set (abstract data type); Computer security; Data mining; Machine learning; Embedding; Image (mathematics)","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.001074716,0.0003799571,0.0005219796,0.0001973103,0.0001060582,0.0003072156,0.002807738,0.0003134741,0.0001380997],"category_scores_gemma":[0.0002597694,0.0002692887,0.0002199009,0.0005098102,0.00009115815,0.00016083,0.003025643,0.001960109,0.00000150051],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001058637,"about_ca_system_score_gemma":0.0001229893,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001757907,"about_ca_topic_score_gemma":0.0001269274,"domain_scores_codex":[0.9968452,0.0007904205,0.0005797273,0.0008223567,0.0005005103,0.000461793],"domain_scores_gemma":[0.9966692,0.001156125,0.0003608486,0.001632531,0.0001230356,0.00005826566],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00001268507,0.00004430067,0.0009318357,0.00004979126,0.00001585462,0.00004330441,0.000196969,0.9876034,0.000004776959,0.004224392,0.00002241725,0.006850304],"study_design_scores_gemma":[0.0002605973,0.0000193251,0.001341406,0.0002331514,0.000008175264,0.000002827468,0.0000532056,0.9973772,0.0001015371,0.0003069243,0.000006071561,0.0002895893],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.07634915,0.0000698858,0.9186202,0.001650391,0.001924517,0.000301883,3.353614e-7,0.0001045192,0.0009790644],"genre_scores_gemma":[0.9659783,0.000003720136,0.03325555,0.0005003033,0.0001501259,0.0000345667,0.00001515958,0.00002817962,0.00003411786],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.8896291,"threshold_uncertainty_score":0.9999759,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01835376667416081,"score_gpt":0.2495340389262994,"score_spread":0.2311802722521386,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}