Systematic Evaluation of Dataset Watermarking for Intellectual Protection

This research evaluates nine different dataset watermarking methods (techniques for embedding hidden markers into training data to prove ownership of AI models) by testing how well they preserve prediction accuracy, verify ownership, and resist attacks. The study finds that while most watermarking methods cause minimal overall accuracy loss, they can significantly harm performance on specific classes, fail completely when training data is mixed together, and have various other robustness vulnerabilities.