PK-Free, Blind and Collusion-Resistant Synthetic Tabular Fingerprinting With Diffusion Models

Summary

The paper proposes PBC-TabFip, a framework for fingerprinting synthetic tabular data generated by diffusion models, designed to work without a primary key and without the original data. It combines watermarking in the generation process with symmetric Tardos codes to resist collusion attacks, and reports that TabFip with Tardos codes identifies at least one colluder with 100% probability without accusing innocent users against two collusion attacks.

Related items

• InfoCutpurse: Decomposing Explanation-Guided Model Extraction on Tabular DataSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoFingerprinting the Dispatchers behind Distributed Model ExtractionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoModel Extraction of Convolutional Neural Networks with Max-PoolingSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoTrustworthy Distributed Machine Learning in Cloud-Edge-IoT Systems: A Heterogeneity-Aware Survey of Security, Privacy, and RobustnessSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoPreventing Model Extraction in Contextual Linear OptimizationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)