Congratulations to Yana Sakhnovych on receiving the Schaumayer Award!
We are delighted to congratulate Yana Sakhnovych on receiving an award from the Dr. Maria Schaumayer Foundation for her diploma thesis, “Black-box Model Watermarking in Federated Learning.”
The thesis was supervised by Edgar Weippl, research director of SBA Research as well as full professor and dean of the Faculty of Computer Science at the University of Vienna,, and Rudolf Mayer, head of the Machine Learning and Data Mining Group at SBA Research.
Abstract
Federated learning allows multiple parties to collaboratively train a model, without needing individual participants to directly reveal their private data. However, sharing the model at various stages of training poses risks for the model owners, particularly from insider threats such as malicious clients who may steal the model. To counter these threats, embedding a watermark in the model allows owners to prove ownership and protect against unauthorized use. This thesis aims to evaluate the effectiveness, fidelity, robustness, and efficiency of state-of-the-art federated black-box watermarking approaches. A key focus is on intermediate models, specifically assessing how well these models are protected during the training process, and exploring how they can be exploited in watermark removal attacks. Additionally, this work proposes modifications to existing watermarking methods in federated learning to address the identified vulnerabilities.