TADW: Traceable and Anti-detection Dynamic Watermarking of Deep Neural Networks

Figure 4

The testing accuracy of the watermarked model under different pruning rates (AG-News).