无需修改模型即可实现版权验证,兼顾隐私与效率。
NWaaS: A Non-Intrusive and Privacy-Preserving Watermarking-as-a-Service System with Adaptive Resource Scheduling
- 通过侧信道水印技术在不改动模型情况下验证版权
- 支持灵活分层托管,平衡隐私保护与服务成本
- 自适应资源调度提升边缘云环境下的系统性能
机器学习即服务中的知识产权保护至关重要但极具挑战。现有水印即服务模式面临侵入性、隐私风险和效率低下的三重困境。为此,我们提出非侵入式水印即服务(NWaaS),一个可信赖且高效的IP保护框架。首先引入$ exttt{ShadowMark}$,一种新型水印算法,在不修改模型的前提下建立所有权验证的侧信道,实现零性能损耗,无需参数微调或原始训练数据,有效解决现有方法的侵入性和低效问题。基于此非侵入特性,设计协作分层机制,允许模型所有者自主托管部分网络层,灵活权衡知识产权隐私与服务成本。此外,为缓解高并发下协同计算带来的延迟并提升资源利用率,提出比例差异联合调度算法,适配边缘-云环境的异构约束。大量实验表明,NWaaS在多种连续的X-to-Image模态中均能提供鲁棒的所有权验证,同时确保所有者隐私安全和卓越的系统性能。
原文摘要 · Abstract (English)
Securing intellectual property (IP) in Machine Learning as a Service is critical yet challenging. While deep neural network watermarking serves as a standard defense against model extraction, existing Watermarking-as-a-Service paradigms face a triple challenge of intrusiveness, privacy risks, and inefficiency. To address these challenges, we propose Non-intrusive Watermarking as a Service (NWaaS), a holistic framework enabling trustworthy and efficient IP protection. We first introduce $\mathtt{ShadowMark}$, a novel watermarking algorithm that establishes a side-channel for ownership verification without modifying the model. It ensures zero performance degradation and eliminates the need for parameter-heavy fine-tuning as well as access to original training data, thereby addressing the intrusiveness and inefficiency inherent in existing approaches. Leveraging this non-intrusive property, we design a collaborative partitioning mechanism that allows model owners to offload self-defined partial layers, enabling a flexible trade-off between IP privacy and service cost. Furthermore, to mitigate latency from collaborative computing under high concurrency and enhance system resource utilization, we propose proportion disparity joint scheduling, a payload-balancing resource scheduling algorithm tailored to the heterogeneous constraints of edge-cloud environments. Extensive experiments demonstrate that NWaaS provides robust ownership verification across diverse continuous X-to-Image modalities, while ensuring secure owner privacy protection and superior system performance.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。