Abstract
Watermarking for deep learning models is discussed. Firstly, it is noted that the value of the trained deep learning model. Then, watermark technologies as copyright protection are reviewed including latest research activities. Furthermore, evaluation items of the deep learning watermarks are summarized with consideration on malicious attacks.