Yinghai Zhou

Neural Honeytrace: Plug&Play Watermarking Framework against Model Extraction Attacks

Triggerable watermarking enables model owners to assert ownership against model extraction attacks. However, most existing approaches require additional training, which limits post-deployment flexibility, and the lack of clear theoretical foundations makes them vulnerable to adaptive attacks. In thi…