TADW: Traceable and Anti-detection Dynamic Watermarking of Deep Neural Networks

Table 4

Query results of trigger set and test set before and after ONION filtering.

ONION	SST-2		AG-News
	Testing acc (%)	WM query	Testing acc (%)	WM query
Before filtering	88.63	[11,11,11,11,11, 11,11,11,11,11]	93.66	[11,11,11,11,11, 11,11,11,11,11]
After filtering	83.25	[11,10,11,11,11, 11,10,10,11,11]	91.03	[11,11,11,11,11, 11,10,11,11,11]