Since production-level trained deep neural networks (DNNs) are of a great business value, protecting such DNN models against copyright infringement and unauthorized access is in a rising demand. However, conventional model protection methods focused only the image classification task, and these protection methods were never applied to semantic segmentation although it has an increasing number of applications. In this paper, we propose to protect semantic segmentation models from unauthorized access by utilizing block-wise transformation with a secret key for the first time. Protected models are trained by using transformed images. Experiment results show that the proposed protection method allows rightful users with the correct key to access the model to full capacity and deteriorate the performance for unauthorized users. However, protected models slightly drop the segmentation performance compared to non-protected models.
翻译:由于生产层面经过培训的深神经网络具有巨大的商业价值,保护这类DNN模型不受侵犯版权和未经授权的进入的需求正在上升,然而,常规示范保护方法只注重图像分类任务,这些保护方法从未应用于语义分解,尽管其应用数量越来越多。在本文件中,我们提议通过首次使用带有秘密钥匙的整段式转换,保护语义分解模型不受未经授权的进入。保护模型通过使用变换图像进行培训。实验结果表明,拟议的保护方法允许合法用户以正确的钥匙进入模型的全部容量,并使未经授权的用户的性能恶化。然而,保护模型比非保护模型略微降低了分解功能。