Reviews: Rethinking Deep Neural Network Ownership Verification: Embedding Passports to Defeat Ambiguity Attacks

Neural Information Processing Systems 

There is long discussion regarding the ambiguity attacks. As acknowledged by reviewers, most concerns have been addressed by the rebuttal.