<!DOCTYPE article PUBLIC '-//NLM//DTD Journal Publishing DTD v2.1 20050630//EN' 'http://uploads.ingentaconnect.com/docs/dtd/ingenta-journalpublishing.dtd'>
<article article-type="research-article">
  <front>
    <journal-meta>
      <journal-id journal-id-type="aggregator">72010604</journal-id>
      <journal-title>Electronic Imaging</journal-title>
      <issn pub-type="ppub">2470-1173</issn><issn pub-type="epub"></issn>
      <publisher>
        <publisher-name>Society for Imaging Science and Technology</publisher-name>
        <publisher-loc>7003 Kilworth Lane, Springfield, VA 22151 USA</publisher-loc>
      </publisher>
    </journal-meta>
    <article-meta>
      <article-id pub-id-type="doi">10.2352/ISSN.2470-1173.2020.4.MWSF-022</article-id>
      <article-id pub-id-type="sici">2470-1173(20200126)2020:4L.221;1-</article-id>
      <article-id pub-id-type="publisher-id">ei_24701173_v2020n4_input/s3.xml</article-id>
      <article-id pub-id-type="other">/ist/ei/2020/00002020/00000004/art00003</article-id>
      <article-categories>
        <subj-group>
          <subject>Articles</subject>
        </subj-group>
      </article-categories>
      <title-group>
        <article-title>Watermarking in Deep Neural Networks via Error Back-propagation</article-title>
      </title-group>
      <contrib-group>
        <contrib>
          <name>
            <surname>Wang</surname>
            <given-names>Jiangfeng</given-names>
          </name>
        </contrib>
        <contrib>
          <name>
            <surname>Wu</surname>
            <given-names>Hanzhou</given-names>
          </name>
        </contrib>
        <contrib>
          <name>
            <surname>Zhang</surname>
            <given-names>Xinpeng</given-names>
          </name>
        </contrib>
        <contrib>
          <name>
            <surname>Yao</surname>
            <given-names>Yuwei</given-names>
          </name>
        </contrib>
      </contrib-group>
      <pub-date>
        <day>26</day>
        <month>01</month>
        <year>2020</year>
      </pub-date>
      <volume>2020</volume>
      <issue>4</issue>
      <fpage>22-1</fpage>
      <lpage>22-9</lpage>
      <permissions>
        <copyright-year>2020</copyright-year>
      </permissions>
      <abstract>
        <p>
          <italic>Recent advances in deep learning (DL) have led to great success in tasks of computer vision and pattern recognition. Sharing pre-trained DL models has been an important means to promote the rapid progress of research community and development of DL based systems. However, it also
 raises challenges to model authentication. It is quite necessary to protect the ownership of the DL models to be released. In this paper, we present a digital watermarking technique to deep neural networks (DNNs). We propose to mark a DNN by inserting an independent neural network that allows
 us to use selective weights for watermarking. The independent neural network is only used in the training phase and watermark verification phase, and will not be released publicly. Experiments have shown that, the performance of marked DNN on its original task will not be degraded significantly.
 Meantime, the watermark can be successfully embedded and extracted with a low neural network loss even under the common attacks including model fine-tuning and compression, which has shown the superiority and applicability of the proposed work.</italic>
        </p>
      </abstract>
      <kwd-group>
        <kwd>Watermarking</kwd>
        <kwd>Deep neural networks</kwd>
        <kwd>Error back-propagation</kwd>
      </kwd-group>
    </article-meta>
  </front>
</article>
