Attention Distraction: Watermark Removal Through Continual Learning with Selective Forgetting

Loading...
Thumbnail Image
File version

Accepted Manuscript (AM)

Author(s)
Zhong, Q
Zhang, LY
Hu, S
Gao, L
Zhang, J
Xiang, Y
Griffith University Author(s)
Primary Supervisor
Other Supervisors
Editor(s)
Date
2022
Size
File type(s)
Location

Taipei, Taiwan

License
Abstract

Fine-tuning attacks are effective in removing the embedded watermarks in deep learning models. However, when the source data is unavailable, it is challenging to just erase the watermark without jeopardizing the model performance. In this context, we introduce Attention Distraction (AD), a novel source data-free watermark removal attack, to make the model selectively forget the embedded watermarks by customizing continual learning. In particular, AD first anchors the model's attention on the main task using some unlabeled data. Then, through continual learning, a small number of lures (randomly selected natural images) that are assigned a new label distract the model's attention away from the watermarks. Experimental results from different datasets and networks corroborate that AD can thoroughly remove the watermark with a small resource budget without compromising the model's performance on the main task, which outperforms the state-of-the-art works.

Journal Title
Conference Title

2022 IEEE International Conference on Multimedia and Expo (ICME)

Book Title
Edition
Volume
Issue
Thesis Type
Degree Program
School
Publisher link
Patent number
Funder(s)
Grant identifier(s)
Rights Statement
Rights Statement

© 2022 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.

Item Access Status
Note
Access the data
Related item(s)
Subject

Deep learning

Intellectual property law

Persistent link to this record
Citation

Zhong, Q; Zhang, LY; Hu, S; Gao, L; Zhang, J; Xiang, Y, Attention Distraction: Watermark Removal Through Continual Learning with Selective Forgetting, 2022 IEEE International Conference on Multimedia and Expo (ICME), 2022