Download file
Download file
2 files

Perceptual Hashing of Deep Convolutional Neural Networks for Model Copy Detection

posted on 2023-02-01, 04:35 authored by Chen HaozheChen Haozhe, Hang Zhou, Jie Zhang, Dongdong Chen, Weiming Zhang, Kejiang Chen, Gang Hua, Nenghai Yu

This paper has been accepted by ACM TOMM.

In recent years, many model intellectual property (IP) proof methods for IP protection have been proposed, such as model watermarking and model fingerprinting. However, as an important part of the model IP protection system, the model copy detection task has not received enough attention. With the increasing number of neural network models transmitted and deployed on the Internet, the search for similar models is in great demand, which concurrently triggers the security problem of copy detection of models for IP protection. Due to the high computational complexity, both model watermarking and model fingerprinting lack the capability to efficiently find suspected infringing models among tens of millions of models. In this paper, inspired by the hash-based image retrieval methods, we propose a perceptual hashing algorithm for convolutional neural networks (CNNs). The proposed perceptual hashing algorithm can convert the weights of CNNs to fixed-length binary hash codes so that the lightly modified version has the similar hash code as the original model. By comparing the similarity of a pair of hash codes between a query model and a test model in the model library, the similar versions of a query model can be retrieved efficiently. To the best of our knowledge, this is the first perceptual hashing algorithm for CNNs. The experiment performed on a model library containing 3,565 models indicates that our proposed perceptual hashing scheme has a superior copy detection performance.


Natural Science Foundation of China under Grant U20B2047, 62072421 and 62002334

Exploration Fund Project of University of Science and Technology of China under Grant YD3480002001

Fundamental Research Funds for the Central Universities under Grant WK2100000011


Email Address of Submitting Author

Submitting Author's Institution

the CAS Key Laboratory of Electromagnetic Space Information, University of Science and Technology of China

Submitting Author's Country

  • China