Time (Beijing)
Time (UTC)
22:00 - 22:10 14:00 – 14:10 Openning Remarks: Chee Seng Chan / Lixin Fan
22:10 – 22:30 14:10 – 14:30 Invited Talk 1: Mingfu Xue, Nanjing University of Aeronautics and Astronautics
Title:DNN Intellectual Property Protection: Taxonomy, Attacks and Evaluations
Video: Click Here & Slides: download
22:30 – 22:50 14:30 – 14:50 Invited Talk 2: Franziska Boenisch, Fraunhofer Institute for Applied and Integrated Security
Title: A Survey on Model Watermarking Neural Networks
Video: Click Here & Slides: download
22:50 – 23:10 14:50 – 15:10 Invited Talk 3: Kam Woh Ng, University of Surrey
Title: DeepIP:Deep Neural Network Intellectual Property Protection with Passports
Video: Click Here & Slides: download
23:10 - 23:30 15:10 - 15:30 Invited Talk 4: Ding Sheng Ong, University of Malaya
Title: Protecting Intellectual Property of Generative Adversarial Networks From Ambiguity Attacks
Video: Click Here & Slides: download
23:30 – 23:40 15:30 – 15:40 Break
23:40 – 24:00 15:40 – 16:00 Invited Talk 5:Fangqi Li, Shanghai Jiao Tong University
Regulating Ownership Verification for Deep Neural Networks: Scenarios, Protocols, and Prospects
Video: Click Here & Slides: download
00:00 – 00:20 16:00 – 16:20 Invited Talk 6: Jian Han Lim, University of Malaya
Title: Protect, Show, Attend and Tell: Image Captioning Model with Ownership Protection
Video: Click Here & Slides: download
00:20 – 00:40 16:20 – 16:40 Invited Talk 7: Bowen Li, Shanghai Jiao Tong University & Webank AI lab
Title: FedIPR: Ownership Verification for Federated Deep Neural Network Models
Video: Click Here & Slides: download
00:40 – 1:00 16:40 – 17:00 Invited Talk 8: Buse Gül Atli Tekgül, Aalto University
Title: Model Stealing and Ownership Verification of Deep Neural Networks
Video: Click Here & Slides: download
01:00 - 17:00 - Concluding Remark: Lixin Fan/Chee Seng Chan

Machine learning techniques, especially deep learning (DL) techniques, have made significant technological break-throughs in recent years and are widely applied in many fields, such as image classification, object detection, voice recognition, natural language processing, self-driving cars, smart healthcare, etc. Trained DL models are of high value and must be considered intellectual property of the legitimate owner, i.e. the party that created it. The value of DL models lies in the effort and resources allocated in the process of training data collection, cleansing, pre-processing, organizing, storing, and in certain cases even manual labelling, which is often time-consuming and expensive. Therefore, there is an urgent need to protect deep learning (DL) models from being illegally copied, redistributed, or abused without respecting the intellectual properties of legitimate owners. This workshop is intended to be positioned at the frontier of IPR protection research [1-4] and showcase the most excellent and advanced work underway at academic and private research organizations as well as government labs.


  1. DeepIP: Deep Neural Network Intellectual Property Protection with Passports, IEEE Transactions on Pattern Analysis and Machine Intelligence, 2021
  2. Protecting Intellectual Property of Generative Adversarial Networks from Ambiguity Attacks, CVPR 2021
  3. Embedding Watermarks into Deep Neural Networks, ICMR 2017.
  4. Protecting Intellectual Property of Deep Neural Networks with Watermarking, ASIACCS, 2018

Call for Papers:
We welcome submissions on theory and applications of Intellectual Property Protection (IPR) with a strong emphasis on the protection of Deep Learning models as services. All accepted papers will be presented at the poster sessions. A subset of accepted submissions will also have oral presenta-tions. At least one author of each accepted paper is expected to represent it at the workshop. Topics including (but not limit to):

  • Watermarking for Deep Learning Models
  • Watermarking for Ownership Verifications
  • Cryptography
  • Protocol and Regulation for Deep Learning Models Ownership Protection

Submission Instructions:
Submissions should be a maximum of 6 pages (not including the list of references). We do accept submissions of work recently published or currently under review. The submissions can contain author details. The workshop will not have formal proceedings, but authors of accepted abstracts can choose to have their work published on the workshop webpage. Please refer this formatting guidelines, LaTeX styles, and Word template for submission.

Submission Deadline: 15 July 2021
Submission Site = CMT Submisison Site