A Novel Verifiable Fingerprinting Scheme for Generative Adversarial
  Networks
  This paper presents a novel fingerprinting scheme for the Intellectual
Property (IP) protection of Generative Adversarial Networks (GANs). Prior
solutions for classification models adopt adversarial examples as the
fingerprints, which can raise stealthiness and robustness problems when they
are applied to the GAN models. Our scheme constructs a composite deep learning
model from the target GAN and a classifier. Then we generate stealthy
fingerprint samples from this composite model, and register them to the
classifier for effective ownership verification. This scheme inspires three
concrete methodologies to practically protect the modern GAN models.
Theoretical analysis proves that these methods can satisfy different security
requirements necessary for IP protection. We also conduct extensive experiments
to show that our solutions outperform existing strategies in terms of
stealthiness, functionality-preserving and unremovability.
