{"id":"W4288322434","doi":"10.48550/arxiv.1906.07745","title":"On the Robustness of the Backdoor-based Watermarking in Deep Neural\\n Networks","year":2019,"lang":"en","type":"preprint","venue":"arXiv (Cornell University)","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":19,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Backdoor; Digital watermarking; Watermark; Robustness (evolution); Computer science; Deep learning; Black box; Artificial neural network; Artificial intelligence; Deep neural networks; Set (abstract data type); White box; Computer security; Data mining; Machine learning; Embedding; Image (mathematics)","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0006808233,0.00036132,0.0003898614,0.0002022986,0.0001928397,0.00009645289,0.004816351,0.0003018958,0.000030836],"category_scores_gemma":[0.0001333457,0.0002550054,0.0002880897,0.0009267985,0.0001857158,0.0001969599,0.003307005,0.001763659,0.000007769392],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002108956,"about_ca_system_score_gemma":0.0001243289,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001187726,"about_ca_topic_score_gemma":0.00005914095,"domain_scores_codex":[0.9973482,0.0008455527,0.0002895237,0.0009060164,0.0001768259,0.0004338735],"domain_scores_gemma":[0.9961392,0.0009403635,0.0005088928,0.00225774,0.00009991651,0.00005390866],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00003354366,0.00003821579,0.00763437,0.00004217638,0.00002141689,0.00003297207,0.00008939896,0.9610644,0.000002254355,0.03070726,0.00002481855,0.0003091643],"study_design_scores_gemma":[0.0004232543,0.00002146432,0.003507149,0.0002181206,0.00002584682,0.000001080727,0.00003312583,0.9930303,0.00002628275,0.002417065,0.00001509359,0.0002812903],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.266369,0.00001687189,0.7306308,0.0004305761,0.001518416,0.0004098405,0.00000114852,0.00005903565,0.0005643971],"genre_scores_gemma":[0.9991001,0.000007602036,0.0003993943,0.0002399214,0.00007211076,0.000001371058,0.000003382945,0.00002516496,0.0001509541],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.7327311,"threshold_uncertainty_score":0.9999902,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04076673861838839,"score_gpt":0.1826488826764279,"score_spread":0.1418821440580395,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}