Consensus Learning with Multi-Party Perturbation Triggers for Secure Model Access
Yizhun Zhang, Jie Huang, Zeping Zhang, Shuaishuai Zhang, Changhao Ding, Xuan Chen
摘要
With the widespread deployment of deep learning models in multi-party collaborative scenarios, the issues of secure model access control and intellectual property (IP) protection have become increasingly critical. To address the limitations of existing methods that lack proactive defense mechanisms in such settings, this paper introduces a novel paradigm Consensus Learning which enables fine-grained control over model execution permissions via a multi-party joint authorization mechanism. Building on this, we propose the Collaborative Perturbation Trigger Method (CPTM), which allows participating parties to collaboratively generate perturbation-based trigger data that embed identity features. The model can only be activated using the collectively constructed trigger, enforcing tightly bound access control without modifying the model architecture. Extensive experiments on CIFAR-10, CIFAR-100, MNIST, and Face-LFW datasets demonstrate that the proposed method maintains prediction accuracy within 2% of the baseline unprotected models on authorized data. In contrast, under unauthorized or adversarial inputs, model accuracy drops below 10%, showcasing strong access control capabilities and robustness. This study offers a novel direction for building scalable, robust, and proactively protected deep learning models in multi-party collaborative environments.
问问这篇 Paper
智能体会读完全文。
Lune 把这篇 Paper 索引到了每一个公式,引用它的顶会 Paper 也一样。你提问,回答直接引用原文。
它引用的顶会 Paper10
- Provably Secure Federated Learning against Malicious ClientsXiaoyu Cao, Jinyuan Jia, Neil Zhenqiang GongAAAI 2021 · 被引用 161 次
- RIGA: Covert and Robust White-Box Watermarking of Deep Neural NetworksTianhao Wang, Florian KerschbaumWWW 2021 · 被引用 128 次
- Protecting Intellectual Property of Language Generation APIs with Lexical WatermarkXuanli He, Qiongkai Xu, Lingjuan Lyu, Fangzhao Wu 等AAAI 2022 · 被引用 124 次
- Defending against Model Stealing via Verifying Embedded External FeaturesYiming Li, Linghui Zhu, Xiaojun Jia, Yong Jiang 等AAAI 2022 · 被引用 87 次
- DeepAuth: A DNN Authentication Framework by Model-Unique and Fragile Signature EmbeddingYingjie Lao, Weijie Zhao, Peng Yang, Ping LiAAAI 2022 · 被引用 34 次
相关 Paper
- ActiveDaemon: Unconscious DNN Dormancy and Waking Up via User-specific Invisible TokenGe Ren, Gaolei Li, Shenghong Li, Libo Chen 等NDSS 2024
- Echoes of Ownership: Adversarial-Guided Dual Injection for Copyright Protection in MLLMsChengwei Xia, Fan Ma, Ruijie Quan, Yunqiu Xu 等CVPR 2026 · 被引用 2 次
- Authority Backdoor: A Certifiable Backdoor Mechanism for Authoring DNNsHan Yang, Shaofeng Li, Tian Dong, Xiangyu Xu 等AAAI 2026
- MAP: MAsk-Pruning for Source-Free Model Intellectual Property ProtectionBoyang Peng, Sanqing Qu, Yong Wu, Tianpei Zou 等CVPR 2024 · 被引用 6 次
- Deep Neural Network Watermarking against Model Extraction AttackJingxuan Tan, Nan Zhong, Zhenxing Qian, Xinpeng Zhang 等ACM MM 2023 · 被引用 34 次
