Skip to main content

Table 1 The recommended value of L and Ï„ for the trigger sets of N-classification networks

From: Secure neural network watermarking protocol against forging attack

N

2

5

10

20

50

100

The size of trigger set: L

135

55

38

29

23

20

The threshold: Ï„

130

52

36

27

21

18