CPC G06F 21/16 (2013.01) [G06F 21/121 (2013.01); G06N 3/047 (2023.01); G06N 20/00 (2019.01)] | 22 Claims |
1. A system comprising:
a processing unit;
a memory storing software instructions that, when executed by the processing unit, cause the processing unit to:
receive a machine learning model comprising a plurality of layers, respective ones of the layers comprising multiple weights;
determine an accuracy bias for each of multiple different sets of possible values for Np and Nb, wherein an Np of a respective layer is a number of partitions into which to group the weights in the respective layer, and an Nb of a respective partition is a number of least significant bits (LSBs) of the respective partition to be used for watermarking;
determine Np for each of the layers and Nb for each of the partitions in response to the determined accuracy biases;
insert one or more watermark bits into the Nb LSBs of the weights in each of the Np respective partitions in each of the respective layers; and
scramble one or more of the weight bits to produce watermarked and scrambled weights; and
an output device configured to provide the watermarked and scrambled weights to another device.
|