{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,4]],"date-time":"2026-05-04T13:09:37Z","timestamp":1777900177695,"version":"3.51.4"},"publisher-location":"Cham","reference-count":30,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032060952","type":"print"},{"value":"9783032060969","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,9,27]],"date-time":"2025-09-27T00:00:00Z","timestamp":1758931200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,27]],"date-time":"2025-09-27T00:00:00Z","timestamp":1758931200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-06096-9_17","type":"book-chapter","created":{"date-parts":[[2025,9,26]],"date-time":"2025-09-26T09:55:11Z","timestamp":1758880511000},"page":"295-312","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Bounding-Box Watermarking: Defense Against Model Extraction Attacks on\u00a0Object Detectors"],"prefix":"10.1007","author":[{"given":"Satoru","family":"Koda","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ikuya","family":"Morikawa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,9,27]]},"reference":[{"key":"17_CR1","unstructured":"https:\/\/openai.com\/policies\/business-terms"},{"key":"17_CR2","unstructured":"https:\/\/github.com\/giddyyupp\/coco-minitrain"},{"key":"17_CR3","unstructured":"https:\/\/cocodataset.org\/#home"},{"key":"17_CR4","unstructured":"Adi, Y., Baum, C., Cisse, M., Pinkas, B., Keshet, J.: Turning your weakness into a strength: Watermarking deep neural networks by backdooring. In: USENIX Security Symposium, pp. 1615\u20131631 (2018)"},{"key":"17_CR5","unstructured":"Car, S.: Self-driving cars dataset (2023). https:\/\/universe.roboflow.com\/selfdriving-car-qtywx\/self-driving-cars-lfjou, visited on 2024-08-01"},{"key":"17_CR6","doi-asserted-by":"crossref","unstructured":"Chan, S.H., Dong, Y., Zhu, J., Zhang, X., Zhou, J.: Baddet: backdoor attacks on object detection. In: Computer Vision \u2013 ECCV 2022 Workshops, pp. 396\u2013412. Springer Nature Switzerland, Cham (2023)","DOI":"10.1007\/978-3-031-25056-9_26"},{"key":"17_CR7","unstructured":"Chen, K., Lou, X., Xu, G., Li, J., Zhang, T.: Clean-image backdoor: attacking multi-label models with poisoned labels only. In: ICLR (2023)"},{"key":"17_CR8","unstructured":"Cheng, Y., Hu, W., Cheng, M.: Attacking by aligning: clean-label backdoor attacks on object detection. arXiv:2307.10487 (2023)"},{"key":"17_CR9","unstructured":"Ester, M., Kriegel, H.P., Sander, J., Xu, X.: A density-based algorithm for discovering clusters in large spatial databases with noise. In: KDD, pp. 226\u2013231 (1996)"},{"key":"17_CR10","unstructured":"Everingham, M., Van\u00a0Gool, L., Williams, C.K.I., Winn, J., Zisserman, A.: The PASCAL Visual Object Classes Challenge 2007 (VOC2007) Results. http:\/\/www.pascal-network.org\/challenges\/VOC\/voc2007\/workshop\/index.html"},{"key":"17_CR11","doi-asserted-by":"crossref","unstructured":"Goldwasser, S., Kim, M.P., Vaikuntanathan, V., Zamir, O.: Planting undetectable backdoors in machine learning models. In: FOCS, pp. 931\u2013942 (2022)","DOI":"10.1109\/FOCS54457.2022.00092"},{"key":"17_CR12","unstructured":"Jia, H., Choquette-Choo, C.A., Chandrasekaran, V., Papernot, N.: Entangled watermarks as a defense against model extraction. In: USENIX Security Symposium, pp. 1937\u20131954 (2021)"},{"key":"17_CR13","unstructured":"Li, Y., Lyu, X., Koren, N., Lyu, L., Li, B., Ma, X.: Neural attention distillation: erasing backdoor triggers from deep neural networks. In: ICLR (2021)"},{"key":"17_CR14","doi-asserted-by":"crossref","unstructured":"Li, Y., Zhu, L., Jia, X., Jiang, Y., Xia, S.T., Cao, X.: Defending against model stealing via verifying embedded external features. In: AAAI (2022)","DOI":"10.1609\/aaai.v36i2.20036"},{"key":"17_CR15","doi-asserted-by":"crossref","unstructured":"Liu, K., Dolan-Gavitt, B., Garg, S.: Fine-pruning: defending against backdooring attacks on deep neural networks. In: RAID, pp. 273\u2013294 (2018)","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"17_CR16","doi-asserted-by":"crossref","unstructured":"Luo, C., Li, Y., Jiang, Y., Xia, S.T.: Untargeted backdoor attack against object detection. In: ICASSP, pp.\u00a01\u20135 (2023)","DOI":"10.1109\/ICASSP49357.2023.10095980"},{"key":"17_CR17","unstructured":"Ma, H., et al.: Dangerous cloaking: natural trigger based backdoor attacks on object detectors in the physical world. arXiv:2201.08619 (2022)"},{"key":"17_CR18","doi-asserted-by":"crossref","unstructured":"Ma, H., et al.: Transcab: transferable clean-annotation backdoor to object detection with natural trigger in real-world. In: SRDS, pp. 82\u201392 (2023)","DOI":"10.1109\/SRDS60354.2023.00018"},{"key":"17_CR19","unstructured":"Orekondy, T., Schiele, B., Fritz, M.: Prediction poisoning: towards defenses against dnn model stealing attacks. arXiv:1906.10908 (2019)"},{"key":"17_CR20","unstructured":"Ren, S., He, K., Girshick, R., Sun, J.: Faster r-cnn: towards real-time object detection with region proposal networks. NeurIPS 28 (2015)"},{"key":"17_CR21","unstructured":"Sha, Z., He, X., Berrang, P., Humbert, M., Zhang, Y.: Fine-tuning is all you need to mitigate backdoor attacks. arXiv:2212.09067 (2022)"},{"key":"17_CR22","doi-asserted-by":"crossref","unstructured":"Snarski, A., Dimon, W.L., Manville, K., Krumdick, M.: Watermarking for data provenance in object detection. In: AIPR, pp.\u00a01\u20137 (2022)","DOI":"10.1109\/AIPR57179.2022.10092239"},{"key":"17_CR23","doi-asserted-by":"crossref","unstructured":"Szyller, S., Atli, B.G., Marchal, S., Asokan, N.: Dawn: dynamic adversarial watermarking of neural networks. In: ACM MM, pp. 4417\u20134425 (2021)","DOI":"10.1145\/3474085.3475591"},{"key":"17_CR24","unstructured":"Tan, M., Le, Q.: Efficientnet: rethinking model scaling for convolutional neural networks. In: ICML, pp. 6105\u20136114 (2019)"},{"key":"17_CR25","unstructured":"Tram\u00e8r, F., Zhang, F., Juels, A., Reiter, M.K., Ristenpart, T.: Stealing machine learning models via prediction apis. In: USENIX Security Symposium, pp. 601\u2013618 (2016)"},{"key":"17_CR26","doi-asserted-by":"crossref","unstructured":"Uchida, Y., Nagai, Y., Sakazawa, S., Satoh, S.: Embedding watermarks into deep neural networks. In: ICMR, pp. 269\u2013277 (2017)","DOI":"10.1145\/3078971.3078974"},{"key":"17_CR27","unstructured":"Ultralytics: https:\/\/github.com\/ultralytics\/ultralytics"},{"key":"17_CR28","unstructured":"Xiao, Q., Chen, Y., Shen, C., Chen, Y., Li, K.: Seeing is not believing: camouflage attacks on image scaling algorithms. In: USENIX Security Symposium, pp. 443\u2013460 (2019)"},{"key":"17_CR29","doi-asserted-by":"crossref","unstructured":"Zhang, J., et al.: Protecting intellectual property of deep neural networks with watermarking. In: AsiaCCS, pp. 159\u2013172 (2018)","DOI":"10.1145\/3196494.3196550"},{"key":"17_CR30","doi-asserted-by":"crossref","unstructured":"Zhao, Y., et al.: Detrs beat yolos on real-time object detection. In: CVPR, pp. 16965\u201316974 (2024)","DOI":"10.1109\/CVPR52733.2024.01605"}],"container-title":["Lecture Notes in Computer Science","Machine Learning and Knowledge Discovery in Databases. Research Track"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-06096-9_17","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T10:26:08Z","timestamp":1777631168000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-06096-9_17"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,27]]},"ISBN":["9783032060952","9783032060969"],"references-count":30,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-06096-9_17","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,27]]},"assertion":[{"value":"27 September 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ECML PKDD","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Joint European Conference on Machine Learning and Knowledge Discovery in Databases","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Porto","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Portugal","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ecml2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/ecmlpkdd.org\/2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}