{"id":"W4288057808","doi":"10.1109/sp46214.2022.9833693","title":"SoK: How Robust is Image Classification Deep Neural Network Watermarking?","year":2022,"lang":"en","type":"article","venue":"2022 IEEE Symposium on Security and Privacy (SP)","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":66,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Digital watermarking; Robustness (evolution); Watermark; Computer science; Artificial intelligence; Artificial neural network; Data mining; Deep neural networks; Set (abstract data type); Pattern recognition (psychology); Image (mathematics); Machine learning","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow","sts"],"consensus_categories":[],"category_scores_codex":[0.0009868774,0.0003505103,0.0003338651,0.0001564956,0.001361713,0.0005569734,0.001681321,0.0001060274,0.0001742411],"category_scores_gemma":[0.00004666312,0.0003693588,0.0001410092,0.0006562233,0.0001074386,0.0008256419,0.001528593,0.001231503,0.00002023732],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001515418,"about_ca_system_score_gemma":0.00004824355,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00003377704,"about_ca_topic_score_gemma":0.000005458203,"domain_scores_codex":[0.9965103,0.0007491329,0.0003357833,0.0009984587,0.0007460573,0.0006602315],"domain_scores_gemma":[0.9981666,0.000239135,0.0002916341,0.001060477,0.00006201752,0.00018019],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000974456,0.001338872,0.02488934,0.000548679,0.0004744336,0.0007954842,0.1212722,0.5933775,0.02938825,0.09041461,0.08626378,0.0502624],"study_design_scores_gemma":[0.0006714244,0.0002441452,0.001376873,0.00001200095,0.00002714202,0.00006874131,0.0002351015,0.9518842,0.0004286728,0.003251402,0.04126758,0.0005327871],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5152185,0.0007216459,0.3681352,0.09382717,0.01094135,0.00171355,0.00007134675,0.001359589,0.008011609],"genre_scores_gemma":[0.9913878,0.00007085012,0.005211619,0.002297244,0.0006130616,0.00008141907,0.00003545307,0.00004025408,0.0002622798],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.4761693,"threshold_uncertainty_score":0.9999384,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0187109019954699,"score_gpt":0.2471393926217866,"score_spread":0.2284284906263167,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}