{"id":"W4225999490","doi":"10.1609/aaai.v36i9.21184","title":"Cosine Model Watermarking against Ensemble Distillation","year":2022,"lang":"en","type":"article","venue":"Proceedings of the AAAI Conference on Artificial Intelligence","topic":"Internet Traffic Analysis and Secure E-voting","field":"Computer Science","cited_by":23,"is_retracted":false,"has_abstract":true,"ca_institutions":"McMaster University; Simon Fraser University; Huawei Technologies (Canada)","funders":"","keywords":"Digital watermarking; Distillation; Computer science; Ensemble forecasting; Focus (optics); Task (project management); Image (mathematics); Artificial intelligence; Algorithm; Machine learning; Data mining; Engineering; Chemistry; Chromatography","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002545956,0.00108396,0.00135274,0.001029422,0.000800553,0.001191908,0.0009389522,0.00164428,0.002160808],"category_scores_gemma":[0.01095964,0.0003242528,0.0007168289,0.001365081,0.001266308,0.00354539,0.002996278,0.001904379,0.001016476],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0005159375,"about_ca_system_score_gemma":0.0007022768,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0005995647,"about_ca_topic_score_gemma":0.0006623587,"domain_scores_codex":[0.99794,0.0004903211,0.0001195883,0.0003626471,0.0008478517,0.0002396043],"domain_scores_gemma":[0.995347,0.001453987,0.0003798429,0.00220428,0.0005074537,0.0001074719],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001189076,0.0001589141,0.002020074,0.0002544379,0.0001539462,0.0003968263,0.0002032318,0.3311986,0.0818873,0.1520698,0.006848002,0.4236198],"study_design_scores_gemma":[0.00003328497,0.0001279463,0.0003064898,0.00002139441,0.00002348036,0.0002327697,0.00003128851,0.9216205,0.04384046,0.02970555,0.004026526,0.00003021679],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1066334,0.001321789,0.881717,0.0006940758,0.0002798853,0.00009067251,0.0002900145,0.001205181,0.007767957],"genre_scores_gemma":[0.8501313,0.0007247578,0.1421196,0.0002341669,0.0002142789,0.00008389417,0.0005670106,0.0001542259,0.005770757],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.002545956,"threshold_uncertainty_score":0.01346445,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.05706464998515177,"score_gpt":0.2672449593726166,"score_spread":0.2101803093874648,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}