A Dual Model Watermarking Framework for Copyright Protection in Image Processing Networks  

作　　者：Yuhang Meng Xianyi Chen Xingming Sun Yu Liu Guo Wei 

机构地区：[1]Engineering Research Center of Digital Forensics,Ministry of Education,Nanjing University of Information Science and Technology,Nanjing,210044,China [2]The University of North Carolina,Pembroke,31321,USA

出　　处：《Computers, Materials & Continua》2023年第4期831-844,共14页计算机、材料和连续体（英文）

基　　金：supported by the National Natural Science Foundation of China under grants U1836208,by the Priority Academic Program Development of Jiangsu Higher Education Institutions (PAPD)fund;by the Collaborative Innovation Center of Atmospheric Environment and Equipment Technology (CICAEET)fund,China.

摘　　要：Image processing networks have gained great success in many fields,and thus the issue of copyright protection for image processing networks hasbecome a focus of attention. Model watermarking techniques are widely usedin model copyright protection, but there are two challenges: (1) designinguniversal trigger sample watermarking for different network models is stilla challenge;(2) existing methods of copyright protection based on trigger swatermarking are difficult to resist forgery attacks. In this work, we propose adual model watermarking framework for copyright protection in image processingnetworks. The trigger sample watermark is embedded in the trainingprocess of the model, which can effectively verify the model copyright. And wedesign a common method for generating trigger sample watermarks based ongenerative adversarial networks, adaptively generating trigger sample watermarksaccording to different models. The spatial watermark is embedded intothe model output. When an attacker steals model copyright using a forgedtrigger sample watermark, which can be correctly extracted to distinguishbetween the piratical and the protected model. The experiments show that theproposed framework has good performance in different image segmentationnetworks of UNET, UNET++, and FCN (fully convolutional network), andeffectively resists forgery attacks.

关 键 词：Image processing networks copyright protection model watermark 

分 类 号：TP391.41[自动化与计算机技术—计算机应用技术]