Access Control Using Spatially Invariant Permutation of Feature Maps for Semantic Segmentation Models
Not on the map. Why?
Abstract (arXiv)
In this paper, we propose an access control method that uses the spatially invariant permutation of feature maps with a secret key for protecting semantic segmentation models. Segmentation models are trained and tested by permuting selected feature maps with a secret key. The proposed method allows rightful users with the correct key not only to access a model to full capacity but also to degrade the performance for unauthorized users. Conventional access control methods have focused only on image classification tasks, and these methods have never been applied to semantic segmentation tasks. In an experiment, the protected models were demonstrated to allow rightful users to obtain almost the same performance as that of non-protected models but also to be robust against access by unauthorized users without a key. In addition, a conventional method with block-wise transformations was also verified to have degraded performance under semantic segmentation models.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 21 of its 37 references that are in the map. First posted on arXiv 3 Sep 2021.
Builds on
21 of 37 references.
References · 21
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014ImageNet Large Scale Visual Recognition Challengecited by 8,441
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2013Intriguing properties of neural networkscited by 5,114
- 2016SGDR: Stochastic Gradient Descent with Warm Restartscited by 4,993
- 2014Fully Convolutional Networks for Semantic Segmentationcited by 4,845
- 2019Generalized Intersection over Union: A Metric and A Loss for Bounding Box Regressioncited by 1,361
- 2016Practical Black-Box Attacks against Machine Learningcited by 893
- 2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 334
- 2017Embedding Watermarks into Deep Neural Networkscited by 227
- 2017Adversarial Frontier Stitching for Remote Neural Network Watermarkingcited by 110
- 2019[Extended version] Rethinking Deep Neural Network Ownership Verification: Embedding Passports to Defeat Ambiguity Attackscited by 82
9 more
- 2018Recent progress in semantic image segmentationcited by 39
- 2018Learnable Image Encryptioncited by 33
- 2018Encryption-then-Compression Systems using Grayscale-based Image Encryption for JPEG Imagescited by 33
- 2020Block-wise Image Transformation with Secret Key for Adversarially Robust Defensecited by 30
- 2020Block-wise Scrambled Image Recognition Using Adaptation Networkcited by 27
- 2020A GAN-Based Image Transformation Scheme for Privacy-Preserving Deep Neural Networkscited by 27
- 2019Privacy-Preserving Deep Neural Networks with Pixel-based Image Encryption Considering Data Augmentation in the Encrypted Domaincited by 19
- 2021A Protection Method of Trained CNN Model with Secret Key from Unauthorized Accesscited by 15
- 2020Training DNN Model with Secret Key for Model Protectioncited by 14
Built on by
Citing papers per year: 2022: 3; 2023: 0; 2024: 1.
4 papers.
- 2022An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applicationscited by 29
- 2022Access Control of Object Detection Models Using Encrypted Feature Mapscited by 1
- 2024Privacy-Preserving Deep Learning Using Deformable Operators for Secure Task Learningcited by 1
- 2022An Access Control Method with Secret Key for Semantic Segmentation Modelscited by 0
- 2024Privacy-Preserving Deep Learning Using Deformable Operators for Secure Task Learning8 Apr 2024
- 2022An Access Control Method with Secret Key for Semantic Segmentation Models28 Aug 2022
- 2022Access Control of Object Detection Models Using Encrypted Feature Maps1 Feb 2022
- 2022An Overview of Compressible and Learnable Image Transformation with Secret Key and Its Applications26 Jan 2022