arXiv AI By Qilin Zhou, Zhengyuan Wei, Haipeng Wang, Zhuo Wang, Shuo Liu, W. K. Chan

MRCert: Towards Post-deployment Patch Robustness Certification for Adversarially Patched Samples via Type-specific Masking

Read the original on arXiv AI →

MRCert is a masking‑based certified recovery defender that aims to maintain high prediction accuracy while verifying the benignity of labels for adversarially patched inputs in post‑deployment scenarios. It introduces type‑specific necessary properties for both benign and patched samples, enabling a novel label recovery and certification function pair that avoids the accuracy degradation typical of smoothing methods. Experiments show MRCert achieves 35.1% adversarial certified accuracy on ImageNet with 16‑pixel patches, outperforming the state‑of‑the‑art PatchCURE.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv AI.

arXiv Machine Learning
Sep 11

CertDW: Towards Certified Dataset Ownership Verification via Conformal Calibration

The paper introduces CertDW, a certified dataset watermark and ownership verification method that remains reliable even under malicious perturbations. By leveraging conformal prediction, it defines two statistical measures—principal probability (PP) and watermark robustness (WR)—to evaluate model stability on benign versus watermarked samples. The authors derive certification conditions linking WR to a PP-based threshold and provide a high‑probability bound on false positives, enabling robust ownership verification when a suspicious model’s WR exceeds the PP values of benign models.

By Ting Qiao, Yiming Li, Jianbin Li, Yingjia Wang, Leyi Qi, Junfeng Guo, Ruili Feng, Dacheng Tao