Mengnan Du

Towards Explanation of DNN-based Prediction with Guided Feature Inversion

2018

While deep neural networks (DNN) have become an effective computational tool, the prediction results are often criticized by the lack of interpretability, which is essential in many real-world applications such as health informatics. Existing attempts …

Deep Serial Number: Computational Watermarking for DNN Intellectual Property Protection

2020 · arXiv (Cornell University)

In this paper, we present DSN (Deep Serial Number), a simple yet effective watermarking algorithm designed specifically for deep neural networks (DNNs). Unlike traditional methods that incorporate identification signals into DNNs, our approach explores a …

Attacking Neural Networks with Neural Networks: Towards Deep Synchronization for Backdoor Attacks

2023

Backdoor attacks inject poisoned samples into training data, where backdoor triggers are embedded into the model trained on the mixture of poisoned and clean samples.An interesting phenomenon can be observed in the training process: the …