Protecting artificial intelligence IPs: a survey of watermarking and fingerprinting for machine learning. Regazzoni, F., Palmieri, P., Smailbegovic, F., Cammarota, R., & Polian, I. CAAI Transactions on Intelligence Technology, 6(2):180–191, 2021. _eprint: https://ietresearch.onlinelibrary.wiley.com/doi/pdf/10.1049/cit2.12029
Paper doi abstract bibtex Artificial intelligence (AI) algorithms achieve outstanding results in many application domains such as computer vision and natural language processing. The performance of AI models is the outcome of complex and costly model architecture design and training processes. Hence, it is paramount for model owners to protect their AI models from piracy – model cloning, illegitimate distribution and use. IP protection mechanisms have been applied to AI models, and in particular to deep neural networks, to verify the model ownership. State-of-the-art AI model ownership protection techniques have been surveyed. The pros and cons of AI model ownership protection have been reported. The majority of previous works are focused on watermarking, while more advanced methods such fingerprinting and attestation are promising but not yet explored in depth. This study has been concluded by discussing possible research directions in the area.
@article{regazzoniProtectingArtificialIntelligence2021,
title = {Protecting artificial intelligence {IPs}: a survey of watermarking and fingerprinting for machine learning},
volume = {6},
copyright = {© 2021 The Authors. CAAI Transactions on Intelligence Technology published by John Wiley \& Sons Ltd on behalf of The Institution of Engineering and Technology and Chongqing University of Technology.},
issn = {2468-2322},
shorttitle = {Protecting artificial intelligence {IPs}},
url = {https://onlinelibrary.wiley.com/doi/abs/10.1049/cit2.12029},
doi = {10.1049/cit2.12029},
abstract = {Artificial intelligence (AI) algorithms achieve outstanding results in many application domains such as computer vision and natural language processing. The performance of AI models is the outcome of complex and costly model architecture design and training processes. Hence, it is paramount for model owners to protect their AI models from piracy – model cloning, illegitimate distribution and use. IP protection mechanisms have been applied to AI models, and in particular to deep neural networks, to verify the model ownership. State-of-the-art AI model ownership protection techniques have been surveyed. The pros and cons of AI model ownership protection have been reported. The majority of previous works are focused on watermarking, while more advanced methods such fingerprinting and attestation are promising but not yet explored in depth. This study has been concluded by discussing possible research directions in the area.},
language = {en},
number = {2},
urldate = {2025-12-16},
journal = {CAAI Transactions on Intelligence Technology},
author = {Regazzoni, Francesco and Palmieri, Paolo and Smailbegovic, Fethulah and Cammarota, Rosario and Polian, Ilia},
year = {2021},
note = {\_eprint: https://ietresearch.onlinelibrary.wiley.com/doi/pdf/10.1049/cit2.12029},
keywords = {data protection, deep learning (artificial intelligence), fingerprint identification, industrial property, watermarking},
pages = {180--191},
}
Downloads: 0
{"_id":"kPacLpcZS499xGmCM","bibbaseid":"regazzoni-palmieri-smailbegovic-cammarota-polian-protectingartificialintelligenceipsasurveyofwatermarkingandfingerprintingformachinelearning-2021","author_short":["Regazzoni, F.","Palmieri, P.","Smailbegovic, F.","Cammarota, R.","Polian, I."],"bibdata":{"bibtype":"article","type":"article","title":"Protecting artificial intelligence IPs: a survey of watermarking and fingerprinting for machine learning","volume":"6","copyright":"© 2021 The Authors. CAAI Transactions on Intelligence Technology published by John Wiley & Sons Ltd on behalf of The Institution of Engineering and Technology and Chongqing University of Technology.","issn":"2468-2322","shorttitle":"Protecting artificial intelligence IPs","url":"https://onlinelibrary.wiley.com/doi/abs/10.1049/cit2.12029","doi":"10.1049/cit2.12029","abstract":"Artificial intelligence (AI) algorithms achieve outstanding results in many application domains such as computer vision and natural language processing. The performance of AI models is the outcome of complex and costly model architecture design and training processes. Hence, it is paramount for model owners to protect their AI models from piracy – model cloning, illegitimate distribution and use. IP protection mechanisms have been applied to AI models, and in particular to deep neural networks, to verify the model ownership. State-of-the-art AI model ownership protection techniques have been surveyed. The pros and cons of AI model ownership protection have been reported. The majority of previous works are focused on watermarking, while more advanced methods such fingerprinting and attestation are promising but not yet explored in depth. This study has been concluded by discussing possible research directions in the area.","language":"en","number":"2","urldate":"2025-12-16","journal":"CAAI Transactions on Intelligence Technology","author":[{"propositions":[],"lastnames":["Regazzoni"],"firstnames":["Francesco"],"suffixes":[]},{"propositions":[],"lastnames":["Palmieri"],"firstnames":["Paolo"],"suffixes":[]},{"propositions":[],"lastnames":["Smailbegovic"],"firstnames":["Fethulah"],"suffixes":[]},{"propositions":[],"lastnames":["Cammarota"],"firstnames":["Rosario"],"suffixes":[]},{"propositions":[],"lastnames":["Polian"],"firstnames":["Ilia"],"suffixes":[]}],"year":"2021","note":"_eprint: https://ietresearch.onlinelibrary.wiley.com/doi/pdf/10.1049/cit2.12029","keywords":"data protection, deep learning (artificial intelligence), fingerprint identification, industrial property, watermarking","pages":"180–191","bibtex":"@article{regazzoniProtectingArtificialIntelligence2021,\n\ttitle = {Protecting artificial intelligence {IPs}: a survey of watermarking and fingerprinting for machine learning},\n\tvolume = {6},\n\tcopyright = {© 2021 The Authors. CAAI Transactions on Intelligence Technology published by John Wiley \\& Sons Ltd on behalf of The Institution of Engineering and Technology and Chongqing University of Technology.},\n\tissn = {2468-2322},\n\tshorttitle = {Protecting artificial intelligence {IPs}},\n\turl = {https://onlinelibrary.wiley.com/doi/abs/10.1049/cit2.12029},\n\tdoi = {10.1049/cit2.12029},\n\tabstract = {Artificial intelligence (AI) algorithms achieve outstanding results in many application domains such as computer vision and natural language processing. The performance of AI models is the outcome of complex and costly model architecture design and training processes. Hence, it is paramount for model owners to protect their AI models from piracy – model cloning, illegitimate distribution and use. IP protection mechanisms have been applied to AI models, and in particular to deep neural networks, to verify the model ownership. State-of-the-art AI model ownership protection techniques have been surveyed. The pros and cons of AI model ownership protection have been reported. The majority of previous works are focused on watermarking, while more advanced methods such fingerprinting and attestation are promising but not yet explored in depth. This study has been concluded by discussing possible research directions in the area.},\n\tlanguage = {en},\n\tnumber = {2},\n\turldate = {2025-12-16},\n\tjournal = {CAAI Transactions on Intelligence Technology},\n\tauthor = {Regazzoni, Francesco and Palmieri, Paolo and Smailbegovic, Fethulah and Cammarota, Rosario and Polian, Ilia},\n\tyear = {2021},\n\tnote = {\\_eprint: https://ietresearch.onlinelibrary.wiley.com/doi/pdf/10.1049/cit2.12029},\n\tkeywords = {data protection, deep learning (artificial intelligence), fingerprint identification, industrial property, watermarking},\n\tpages = {180--191},\n}\n\n\n\n\n\n\n\n","author_short":["Regazzoni, F.","Palmieri, P.","Smailbegovic, F.","Cammarota, R.","Polian, I."],"key":"regazzoniProtectingArtificialIntelligence2021","id":"regazzoniProtectingArtificialIntelligence2021","bibbaseid":"regazzoni-palmieri-smailbegovic-cammarota-polian-protectingartificialintelligenceipsasurveyofwatermarkingandfingerprintingformachinelearning-2021","role":"author","urls":{"Paper":"https://onlinelibrary.wiley.com/doi/abs/10.1049/cit2.12029"},"keyword":["data protection","deep learning (artificial intelligence)","fingerprint identification","industrial property","watermarking"],"metadata":{"authorlinks":{}},"html":""},"bibtype":"article","biburl":"https://bibbase.org/zotero/saurabhr","dataSources":["ch6gicJeDcjmarByq","GKC8SrQ2ZAtsTm4Y4","c9AXSZmuqbvmFv2NA","LnKWWvhMms5WWbJqj","jt4o6RnX3bG6eNyng","WnFQAXQmhHYTrzMt3","iday4abRA62bPkLTG","xrZ4A5DBeBH7g48L7","nZHuz2NGWo4MtL7qj","TMTQSz8HvYHs9Xuw8","d7QQ9qLipPXYkLm4Y","PmWiMm4ymr9mKCc7d","66BZ89WFsBPMAiCFk","7Zp4QwnSdHkuXmk8q","5QmtctrjSCX35t6Y5","XmR4NHJKxazCWkdyh","PqXAhS6iANrzfTzrr","bSWa5b9hF3mqHMcNh","vwM9Zo8bE2Yrx4bca","ZeTc8dMTTfZu5Eeaa","Y9RGiGxNcfFtkZkvQ","FipmqgiCf9G7itR4P","wSxW2b27DSYKqMoS5","GDDQxnN7WdE8pm7p4","b6FXsZBBrcfzocLFP","Jw7DRrmwAxNoXfsxT","3wo4iFG68ETyZATum","JJ3iC6SazrEnjJeiY","WzY5yv5EoYfwD6Qji","cdRC4H5ziCEqPWovR","aJxJyWNPcMcmiEyMm","HYqgBa2TYXa3oxsSn","w4L9WL7dNnqcmAf4a","FsAd7jQyGWe2XzpPi","ueJM8wTQp5PWCuQpF","FAXgDAY9bZ6TvdBkE","d5enFcqCB2Qu8LhAa","WvG24yzv2rd5e3SeE","WGzrdgg73uGsYuwW6","4s23afpJrhxpTv6aG","TGQEEr6FxpaycYnqc","wCZ8fPNd3Dt8ui9De","piJJKWwoiTrFpkHJT","J2JT4Pr4kWPqtyv5D","idgda6tKxaP9hf9oB","uLZziFmYhMtFzCFoZ","AFjNSeRtE7vsrERXD","dQfoAHsrP8XeW6acT","RpCKMpqR82mCJhGKB","WzgHPZ4eR9beFYtCm","hkB8a6Aoeu8uNrxBa","zqoE2whNc6BPQ7ZvF","TJj6BwAXZ4HJhhM3u","kHGaRsAgFAsw8pP23","fYwh2Lqs8EpHctCZx","NWvk8BnaYzp7c9REp","LYiwRAdrNEtGTbDNH","R7oGPikAppGpJJDq8","BonihonDWnDTweXGE","m9fJ7XXQeTqoQHjcG","YRG67CrzncdQqYzrM","hnFxsSncvFZYm3AMq","Zajb3p4mT6SZ2HBtK","C2FBfhgdaSpTauT3K","ZY737S3kPKpeDQCbX","b56jvammEbo3Xoreq","cXjWC4ewo4dXyhXzo","CP4gCknCS6yLui7t6","9rbXv58xanFP8rEhi","fv9biJcx5Cxy2ibrz","xK4AgSHzcrTkC8w9n","p2WxP242BiN6FYQrr","qef2f5MNvQJRXwrxs","mHM9e6MAPd7zozP6m","8eAc8EE9tnQk5Rpyg","ruGCXiMpS3H4s93WZ","rrqvsGiuJCPJBGb83","WYFSoE3yg5ZZnmLkW","kHxkzBmJoTrawo8yj","6Pv7pQDa5k9MDFwrb","SWm8JWSKXvcHqHFvx","pK9MPmvkQ2hTXqAek","WbQH5Wx4DqY6yJrnP","7g7oXyqXEaCrtQSHX","BWkR8LPMztnbNst2G","htWoYtZQgWLBeawi3","sB2n5uCBbb73HKYtd","HsRaLjjthQcrtQ8sM","jLQoNAPaQZEuNqMN9","5ZBrRNCjbvBZkx5M4","AJP5pyAEZiFrdTQCa","PvzLweS854jqiDYBW","N37hmwiEou6fptKjr","uEzTtGdwBGWteSQhA","PEkuf5syagKvH3wJB","ujGjNA3netL7xYpBC","TEdzf5PXrRwpkFQpk","2GTcyWrpubqSrjPLH","DfrZy5qsJgDRd3agr","gqZbFFj8fW7iRGibi","KfA5rWhAPvzofTTev","3txsxZrRZxXkCzjo2","NsgXKuJ8AfFL3rGBK","XomvJyMzNWu89YLaK","2Jam8nWYbxBH3Qsdy","S3XqNHWW5pHjnA985","Ayykm4H4BTRQC8PAD","BerMTgKbupFib5gTC","skg5HeQexw6Daqzcn","aha7eYDPBT6ohFQtv","QcyBHiCTybW4Hjnax","QL7nGYfMPj77MThza","CRJYxLJK3Ka4uX2za","X6T33nqgf4N4Joszd","6zTB2ZnR4qpAPEvoJ","BneaXwhsXp52czMeE","YfvyeFZLMd9kqaTfE","9dgWRkPW9oy9SMTPM","mLF7Skq6wkoX2eb67","GiWEFjrBB4AiYxfTx","nvigME32FqJcHAMaJ","YtP8Di7xvTgkDn6Be","zYvceEn3QcTRHWcNz","Q62qctkhY4YRg58DX","ycaBYRAZE52cDrY8Q","SQyh2wamPAnfYiFvw","qsAywWWQDoLvLJRG2","ADK3cj7huFcotnJkW","cjtn5ZvrRZpbndfpa","SGDns4jsTSEvvDDhJ","uDtCM8wGYCjfjBFjK","3GLuyzyTe2yTLZwbW","fZNZveQsKvLkoiiuo","ecuNFkW5ecnWTTgbP","ssvsF7xtu9antxXQs","Du6AKEj5cgLLE5Whp","sHcb589da2sEQd3Jc","Sq3YqavkGjf3vcJpX","GNMe9wS9Lnda4mZCF","v6GGg6CdkTiw5tTeS","Hk9oJrvvdCKWYrdvC","H6f7tQRuS6C8nZStN","rpbfoeJAkJwww7HFv","5MCTbB9jS7YTyhnPQ","iwauPmbqhcsZ7HZ2r","Am2ndAcKC5mRo5RCv","Pfq2zZr8BDuTCxALZ","6Mb7mZWQhzak3z3Wt","SKiPJiLC6FhNQGjKv","JyKRSSTYsmip9oSNZ","8SBrRjD56b2Bjk2vz","tXsynSBiyoPRSyEKq","5fiRPtApgnhgvLPQf","tZJKXLzmFvpwXjnih","tzmZAmHFeofQoFxbs","rqf6xraz2GZhFdAA8","5MaEgyGKTGiBLhyN9","vgbqBEY2TX3abF3tc","sf8xpyvf5n3aj6LXG","CfAwTTNh6Xb9PQPk9","gKz73FDhMDbwwJbGd","kvChq9DS3rimSB4Dq","oTWcMDvmSKZEuHG2t","fdPEJEkZyi7JZkixX","S9wtvSmW747GMWjug","Es8hmtfMDYCgSqBRD","g4e88SrG67KcEBbX9","8af2KgxEKd7Y8bZX7","GafYeJwY6ekPijmES","CSEEMvvsW5Kh73szL","ehDZKiMMgBowWKshd","X5t2NnSdoLMuZrtFv","v4SF6LW2ANaH9HTAP","new2aP3bK7zMY4Rh2","5NpAyHPFJAQnycHY4","6wdL4ysRnGiNAHZQi","xYg2L3DQvcJJC3FjM","DqBKqXfrpLmpsGXaF","tPGL8kF6YbyY2DLXj","dMz4N4H8j5Zg9nPW9","3Q53dF9ysdPT5Jwcy","PiLDP4P6e5E8MNphJ","njNrZfEciDcE4mCFW","AF393n5Kw2tFHzc7F","ekQxcDidcmMCYX3fm","pW8wMz7ASD4yDhhzB","MwwQAk5oh5GRob9gE","kRaGXTxuyDfQdhanC","QQKGhviDyYffZc5Ju","Aep5AcJ2aESkceqwD","QshND6ogDA32WSXGw","nzGR93E9AXRzjPAcB","jCCCLb6QxbAxNaaYn","MPWEsyXvHoZMYW8uS","XFQjffEFSKEBo4qTg","vChxNeqDCNdrM5dYk","i9ML3TZSMsLYMzxur","Liyv6qTFbkNKSm2Ju","XdaNXnBzzt8dGoWW9","8RjgqEJQ4oB5sGge6","qn9yuCj86aSbfzgrD","Kk6Mi6QbT8oqSieHW","3syKsP4t2NxYws4uY","PoR8e58FkZscRyipe","uXyss7EYrjxgXSAWD","L5pKWGoBuW79E9RqN","BR3uwD4gm3uNFbuN7","7QrmmzuwHc2cvkpSZ","uJvgjXHMYkMejphnA","bJK5TzKXS3NDtbtjM","yrFuu9mBBAjgxMBPA","wxL85CdqrWwcteqbK","brepeCRn5KjY3TK2F","gc6bcBRZAE54FfBZQ","MMb7iLF5Lf5jNpapo","PXADBMwwnB6zupNmq","xQouvpAtqkYcdWhvY","8dSjpt4kGTM8vEiAf","w4FfuWjFb2D6ipJkt","mHHZ4iCAKWjrKQHtD","DzkEhyZZ6KqTQW8By","FLarCEQkgscKNZsRH","euYXna79ELcfpinmt","cSCji3imqKa9BwDii","7YiyDgChGTgKYcLFq","yTsFZbc85hp3ijkst","cs98MAte44Gc9JYFv","AendY8GrGbqXn5FhX","oDnun7RLqhNoP86cR","QXwc9m7bxGBXCATF6","MXuTrPKMADMzMGxwZ","EJAj3GDwM3mJoPHHT","y3QbKjopMQHu29fvx","A8FBMphdWBYbAqHzC","WbnxsYTqJ9AFHtMST","gZZaiZakHdRwKKu6d","nW68dWTQitecLbLjG","JuxixsgcwPY8XCJjP","8v5R5jb3B7uJrAYL6","n2Sw7sftc6d7tpDfM","MYj7dydMGGsoaHqxJ","F7pPhJaHmevQjGyJ4","xXZiD6zF6MiavHjF3","WbTmf5QJFxy3TKGNr","KydWp7pzqNcMtANfu","5bQHZTEMXYFPqk4wb","ixz4FFpFkoAdb33ft","ucnpwwNMwQermkdk3","k5ERgfBSMoXir4dDa","zBkxogo9Kpgr2v59g","6bAYAM36R6MvL2yhi","nJXHkaY4iyfEpTnNB","NMzR6ARByFAn3pTgw","EqJRcnsLDNPhZbcfk","cXE8nSeRMTd9MGnyx","WcFxkYdno9hipWdr9","RZkAFYFHmXjTnPxy2","Pt2o6BXXBYCW4TfhX","Xh4PeaTQNcGeKLmBM","Bn3LRo3T8YbAeexQm","nxjWwW7fWbb5tfpKz"],"keywords":["data protection","deep learning (artificial intelligence)","fingerprint identification","industrial property","watermarking"],"search_terms":["protecting","artificial","intelligence","ips","survey","watermarking","fingerprinting","machine","learning","regazzoni","palmieri","smailbegovic","cammarota","polian"],"title":"Protecting artificial intelligence IPs: a survey of watermarking and fingerprinting for machine learning","year":2021}