{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/what-can-discriminator-do-towards-box-free","title":"What can Discriminator do? Towards Box-free Ownership Verification of Generative Adversarial Network","arxiv_id":"2307.15860","date":"2023-07-29","proceeding":null,"authors":["Ziheng Huang","Boheng Li","Yan Cai","Run Wang","Shangwei Guo","Liming Fang","Jing Chen","Lina Wang"],"abstract":"In recent decades, Generative Adversarial Network (GAN) and its variants have achieved unprecedented success in image synthesis. However, well-trained GANs are under the threat of illegal steal or leakage. The prior studies on remote ownership verification assume a black-box setting where the defender can query the suspicious model with specific inputs, which we identify is not enough for generation tasks. To this end, in this paper, we propose a novel IP protection scheme for GANs where ownership verification can be done by checking outputs only, without choosing the inputs (i.e., box-free setting). Specifically, we make use of the unexploited potential of the discriminator to learn a hypersphere that captures the unique distribution learned by the paired generator. Extensive evaluations on two popular GAN tasks and more than 10 GAN architectures demonstrate our proposed scheme to effectively verify the ownership. Our proposed scheme shown to be immune to popular input-based removal attacks and robust against other existing attacks. The source code and models are available at https://github.com/AbstractTeen/gan_ownership_verification","url_abs":"https://arxiv.org/abs/2307.15860v1","url_pdf":"https://arxiv.org/pdf/2307.15860v1.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"what-can-discriminator-do-towards-box-free","repo_url":"https://github.com/abstractteen/gan_ownership_verification","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":0,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}}],"tasks":[{"task_slug":null,"task_name":"Generative Adversarial Network"},{"task_slug":"image-generation","task_name":"Image Generation"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=2307.15860","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2307.15860"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/abstractteen/gan_ownership_verification","reach":{"status":"ok","spdx":"MIT"}},{"provenance":"deterministic:regex_extraction","url":"https://github.com/AbstractTeen/gan_ownership_verification","reach":{"status":"ok","spdx":"MIT"}}],"summary":{"ran":4,"ran_fixture":1,"ran_draft_wrong":1},"by_repo_kind":{"official":{"samples":6,"ran":6,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"69fc958b5c4dccbf","entry":"Discriminator_oneclass64","repo":"AbstractTeen/gan_ownership_verification","repo_kind":"official","path":"models/dcgan.py","file_url":"https://github.com/AbstractTeen/gan_ownership_verification/blob/HEAD/models/dcgan.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":"invariant","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"69fc958b5c4dccbf"}},{"code_sha256_prefix":"8466931f776cda0a","entry":"denorm","repo":"abstractteen/gan_ownership_verification","repo_kind":"official","path":"utils.py","file_url":"https://github.com/abstractteen/gan_ownership_verification/blob/HEAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"8466931f776cda0a"}},{"code_sha256_prefix":"9eb551a5d4ef16a1","entry":"get_loader","repo":"abstractteen/gan_ownership_verification","repo_kind":"official","path":"data_loader.py","file_url":"https://github.com/abstractteen/gan_ownership_verification/blob/HEAD/data_loader.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"9eb551a5d4ef16a1"}},{"code_sha256_prefix":"13b5c5a954dcfee5","entry":"get_radius","repo":"abstractteen/gan_ownership_verification","repo_kind":"official","path":"utils.py","file_url":"https://github.com/abstractteen/gan_ownership_verification/blob/HEAD/utils.py","link_basis":"plan_row","language":"python","status":"ran_fixture","verification_level":1,"contract_check":"RAISES","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"13b5c5a954dcfee5"}},{"code_sha256_prefix":"bedff51745d2cf84","entry":"l2normalize","repo":"abstractteen/gan_ownership_verification","repo_kind":"official","path":"models/spectral_norm.py","file_url":"https://github.com/abstractteen/gan_ownership_verification/blob/HEAD/models/spectral_norm.py","link_basis":"harvester_set","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"MISDECLARED","metamorphic_tier":"invariant","behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"bedff51745d2cf84"}},{"code_sha256_prefix":"cef20a0949e4f556","entry":"pearson","repo":"abstractteen/gan_ownership_verification","repo_kind":"official","path":"utils.py","file_url":"https://github.com/abstractteen/gan_ownership_verification/blob/HEAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"cef20a0949e4f556"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}