Artificial Intelligence (AI) has found wide application, but also poses risks
due to unintentional or malicious tampering during deployment. Regular checks
are therefore necessary to detect and prevent such risks. Fragile watermarking
is a technique used to identify tampering in AI models. However, previous
methods have faced challenges including risks of omission, additional
information transmission, and inability to locate tampering precisely. In this
paper, we propose a method for detecting tampered parameters and bits, which
can be used to detect, locate, and restore parameters that have been tampered
with. We also propose an adaptive embedding method that maximizes information
capacity while maintaining model accuracy. Our approach was tested on multiple
neural networks subjected to attacks that modified weight parameters, and our
results demonstrate that our method achieved great recovery performance when
the modification rate was below 20%. Furthermore, for models where watermarking
significantly affected accuracy, we utilized an adaptive bit technique to
recover more than 15% of the accuracy loss of the model.

我们提出了一种检测篡改参数和位的方法，可以用于检测、定位和恢复已被篡改的参数。我们还提出了一种自适应嵌入方法，以在保持模型准确性的同时最大限度地提高信息容量。我们的方法在多个神经网络上进行了测试，并且当修改率低于 20% 时，结果表明我们的方法在恢复性能方面表现出色。此外，对于水印对准确性产生明显影响的模型，我们利用自适应位技术恢复了超过 15% 的准确性损失。