Fig. 3From: Secure neural network watermarking protocol against forging attackTransfer learned watermarked network classification accuracy for the owner’s trigger set and test set. The data in the figure is the average of five experiment resultsBack to article page