{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/non-transferable-learning-a-new-approach-for","title":"Non-Transferable Learning: A New Approach for Model Ownership Verification and Applicability Authorization","arxiv_id":"2106.06916","date":"2021-06-13","proceeding":"ICLR 2022 4","authors":["Lixu Wang","Shichao Xu","Ruiqi Xu","Xiao Wang","Qi Zhu"],"abstract":"As Artificial Intelligence as a Service gains popularity, protecting well-trained models as intellectual property is becoming increasingly important. There are two common types of protection methods: ownership verification and usage authorization. In this paper, we propose Non-Transferable Learning (NTL), a novel approach that captures the exclusive data representation in the learned model and restricts the model generalization ability to certain domains. This approach provides effective solutions to both model verification and authorization. Specifically: 1) For ownership verification, watermarking techniques are commonly used but are often vulnerable to sophisticated watermark removal methods. By comparison, our NTL-based ownership verification provides robust resistance to state-of-the-art watermark removal methods, as shown in extensive experiments with 6 removal approaches over the digits, CIFAR10 & STL10, and VisDA datasets. 2) For usage authorization, prior solutions focus on authorizing specific users to access the model, but authorized users can still apply the model to any data without restriction. Our NTL-based authorization approach instead provides data-centric protection, which we call applicability authorization, by significantly degrading the performance of the model on unauthorized data. Its effectiveness is also shown through experiments on the aforementioned datasets.","url_abs":"https://arxiv.org/abs/2106.06916v2","url_pdf":"https://arxiv.org/pdf/2106.06916v2.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"non-transferable-learning-a-new-approach-for","repo_url":"https://github.com/conditionWang/NTL","is_official":1,"mentioned_in_paper":0,"mentioned_in_github":0,"framework":"pytorch","reach":null}],"tasks":[],"methods":[{"method_slug":null,"method_name":null}],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/2106.06916","atlas_url":"https://app.syntology.ai/?focus=2106.06916","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2106.06916"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-25T09:33:49+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"deterministic:regex_extraction","url":"https://github.com/conditionWang/NTL","reach":null}],"summary":{"ran":3,"ran_draft_wrong":5,"unverified":6},"by_repo_kind":{"official":{"samples":14,"ran":8,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":14,"samples":[{"code_sha256_prefix":"d8f22a81f7370894","entry":"Cus_Dataset","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_cifar_stl.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_cifar_stl.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"d8f22a81f7370894"}},{"code_sha256_prefix":"705b1acd19f74a61","entry":"MMD_loss","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_cifar_stl.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_cifar_stl.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"705b1acd19f74a61"}},{"code_sha256_prefix":"bb0795675cba05a5","entry":"VGG","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_cifar_stl.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_cifar_stl.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"bb0795675cba05a5"}},{"code_sha256_prefix":"75054a635951aa81","entry":"add_watermark","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_cifar_stl.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_cifar_stl.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"75054a635951aa81"}},{"code_sha256_prefix":"8b4b2aa0500375d6","entry":"make_layers","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_cifar_stl.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_cifar_stl.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"8b4b2aa0500375d6"}},{"code_sha256_prefix":"f0336aa7f62b0168","entry":"vgg19","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_cifar_stl.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_cifar_stl.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"f0336aa7f62b0168"}},{"code_sha256_prefix":"928972c127cac438","entry":"vgg19","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_visda.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_visda.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"928972c127cac438"}},{"code_sha256_prefix":"95c47c389db597ab","entry":"vgg19","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_cifar_stl.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_cifar_stl.py","link_basis":"first_harvest_node","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"95c47c389db597ab"}},{"code_sha256_prefix":"88b3566ec0eb50aa","entry":"get_augment_data","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_cifar_stl.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_cifar_stl.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"88b3566ec0eb50aa"}},{"code_sha256_prefix":"c5192863ae9909b7","entry":"get_cifar_data","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_cifar_stl.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_cifar_stl.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"c5192863ae9909b7"}},{"code_sha256_prefix":"72df1d401c1cf952","entry":"get_stl_data","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_cifar_stl.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_cifar_stl.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"72df1d401c1cf952"}},{"code_sha256_prefix":"ae491ef6e405c0c4","entry":"train","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_cifar_stl.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_cifar_stl.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"ae491ef6e405c0c4"}},{"code_sha256_prefix":"34761f32bbca15bf","entry":"validate_class","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_cifar_stl.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_cifar_stl.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"34761f32bbca15bf"}},{"code_sha256_prefix":"05433be5d7996335","entry":"vgg11","repo":"conditionWang/NTL","repo_kind":"official","path":"src/ntl/ntl_digit.py","file_url":"https://github.com/conditionWang/NTL/blob/HEAD/src/ntl/ntl_digit.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"05433be5d7996335"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}