<-Scope Go to ToC References ->
| Term | Definition |
| Actor | A human or a process that produces, provides, processes or consumes information. |
| Algorithmic Integrity | The equivalence of the Traceability Data extracted from a modified NN and those extracted from an unmodified NN. |
| Candidate Model | A traceable neural network model to be subjected to a Verification Procedure. |
| Computational Cost | The cost of injecting, Detecting, Decoding or Matching Traceability Data. |
| Detection | The process of finding the presence of a known watermark in a NN. |
| Decoding | The process of extracting the Payload from a watermarked NN. |
| Extraction | The process of computing the fingerprint from an NN. |
| Imperceptibility | A difference in the performance of an NN before and after the watermark embedding process. |
| Matching | The process of finding a fingerprint in a database that correspond to the fingerprint computed from an NN. |
| mean Intersection over Union | (mIoU) The ratio of the size of the intersection of the inference and the ground truth to the size of the union of two label sets; it is averaged by the number of classes. |
| Means | Procedure, tools, dataset or dataset characteristics used to evaluate one or more of Computational Cost, Imperceptibility, or Robustness of a NN Traceability method. |
| Modification | The result of an attack performed during NN Traceability testing. |
| Neural Network | or Artificial Neural Network, a set of interconnected data processing nodes whose connections are affected by Weights. |
| NN Fingerprinting Method | A NN Passive Traceability method that extracts NN identification data from the NN Weights and matches it to a known repository. |
| NN Traceability | The possibility to identify the source and/or a potential Modification of a NN. |
| NN Watermarking Method | A NN Active Traceability method that injects Traceability Data into the Weights or the activation function of a NN to subsequently enable a Decoder/Detector to decode/detect the injected Traceability Data. |
| Original Traceability Data | Traceability Data that is inserted by the active techniques or extracted by the passive techniques, at the beginning of the workflow. |
| Parameter | A set of values characterizing Type and Intensity of a Modification, as used in Table 3. |
| Peak Signal-to-Noise Ratio |  |
| Rho Spearman Value | The correlation value between the extracted vector from the NN under test and the vector in the original NN; it is used to verify whether the retrieved vector corresponds to the inserted vector, with a 0.05 significance level. |
| Robustness | The ability of a NN Traceability method to withstand a Modification in terms of Detection, Decoding or Matching capability. |
| Secret Key | The data that the Traceability method requires to be kept secret. |
| Structural Similarity Index Measure |  |
| Symbol | A binary, numerical, or string element in a Payload. |
| Tester | The user who evaluates a NN Traceability Method according to this Technical Specification. |
| Top-k accuracy | The ratio of the number of times where the correct label is encountered among the top k labels predicted to the total number of trials. |
| Traceability | The possibility to trace the origin of data or verification of the integrity of data. |
| Traceability Data | The data extracted by an Active Traceability method or resulting from the application of a Detection algorithm to an NN for a Passive Traceability Method. |
| Traceability Method | |
| – Active | A Traceability Method that alters the NN Weights. |
| – Passive | A Traceability Method that does not alter the NN Weights. |
| Traceable Neural Network | A neural network model to which a watermark has been applied or for which a fingerprint can be computed. |
| Verification Procedure | The application of a method enabling to extract the watermark or to compute the fingerprint. |
| Watermark Overwriting | Insert W Watermark Payloads in a model, in addition to an existing Watermark Payload inserted that model; these W Watermark Payloads have the same size and random Payloads. |
| Watermark Payload | The Symbols carried by a watermark. |
| Weight | The value used to multiply the connection between two nodes of a NN. |
