MPAI-NNW Specification

Introduction Scope Definitions References Imperceptibility Evaluation Robustness Evaluation Computational Cost Evaluation Annex 1 – Notices and Disclaimers Annex 2 – Patent Declarations Annex 3 – Imperceptibility Evaluation

Technical Specification: Neural Network Watermarking (MPAI-NNW) V1.0 provides the means to measure the ability of a watermark: Inserter to inject a payload without deteriorating the NN performance. Detector to recognise the presence and decoder to retrieve the payload of the inserted watermark. Inserter to inject a payload and detector/decoder to detect/decode a payload from a watermarked model or from any of its inferences at a measured computational cost.