{"id":"W3181970103","doi":"10.1109/cvprw53098.2021.00371","title":"A Watermarking-Based Framework for Protecting Deep Image Classifiers Against Adversarial Attacks","year":2021,"lang":"en","type":"article","venue":"","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":8,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Digital watermarking; Adversarial system; Artificial intelligence; Computer science; Watermark; Deep learning; Encoder; Image (mathematics); Robustness (evolution); Classifier (UML); Pattern recognition (psychology); Adversary; Contextual image classification; Computer vision; Computer security","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0007919142,0.00028081,0.0003088216,0.000115039,0.000650194,0.0004713028,0.000937324,0.0002299866,0.00007189147],"category_scores_gemma":[0.002540872,0.0002696673,0.0002379542,0.000541667,0.00007441786,0.0005849402,0.0004626058,0.0007775175,0.00002920559],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001457987,"about_ca_system_score_gemma":0.0003048559,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0000108711,"about_ca_topic_score_gemma":0.00001350415,"domain_scores_codex":[0.9974284,0.0002887421,0.0003857249,0.000841304,0.0003859561,0.0006698435],"domain_scores_gemma":[0.9975617,0.001005022,0.0001955605,0.000820448,0.0002643801,0.0001528957],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000455056,0.000494174,0.002418177,0.0006467594,0.0003817422,0.000884796,0.005744274,0.3922139,0.02894365,0.2301169,0.001532178,0.3361684],"study_design_scores_gemma":[0.001247384,0.00005788599,0.00007710966,0.00008681896,0.00001595875,0.00000826808,0.0002395877,0.971272,0.01476622,0.0071948,0.004593285,0.0004406855],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.0020913,0.00001716116,0.9888282,0.002847899,0.00154094,0.0005121345,0.000001685673,0.0005315833,0.003629028],"genre_scores_gemma":[0.2814033,7.228697e-7,0.716903,0.0009959678,0.0003983189,0.00008462049,0.00001159835,0.00003193767,0.0001705444],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.5790581,"threshold_uncertainty_score":0.9999756,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01895271064321068,"score_gpt":0.2922332760152485,"score_spread":0.2732805653720378,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}