{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,13]],"date-time":"2026-07-13T20:12:03Z","timestamp":1783973523758,"version":"3.55.0"},"publisher-location":"Cham","reference-count":40,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032060952","type":"print"},{"value":"9783032060969","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,9,27]],"date-time":"2025-09-27T00:00:00Z","timestamp":1758931200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,27]],"date-time":"2025-09-27T00:00:00Z","timestamp":1758931200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-06096-9_19","type":"book-chapter","created":{"date-parts":[[2025,9,26]],"date-time":"2025-09-26T09:55:18Z","timestamp":1758880518000},"page":"328-344","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["DeepCore: Simple Fingerprint Construction for\u00a0Differentiating Homologous and\u00a0Piracy Models"],"prefix":"10.1007","author":[{"given":"Haifeng","family":"Sun","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lan","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiang-Yang","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,9,27]]},"reference":[{"key":"19_CR1","unstructured":"Adi, Y., Baum, C., Cisse, M., Pinkas, B., Keshet, J.: Turning your weakness into a strength: watermarking deep neural networks by backdooring. In: 27th USENIX Security Symposium (USENIX Security 2018), pp. 1615\u20131631 (2018)"},{"key":"19_CR2","doi-asserted-by":"crossref","unstructured":"Cao, X., Jia, J., Gong, N.Z.: IPGuard: protecting intellectual property of deep neural networks via fingerprinting the classification boundary. In: Proceedings of the 2021 ACM Asia Conference on Computer and Communications Security, pp. 14\u201325 (2021)","DOI":"10.1145\/3433210.3437526"},{"key":"19_CR3","unstructured":"Chandrasekaran, V., Chaudhuri, K., Giacomelli, I., Jha, S., Yan, S.: Exploring connections between active learning and model extraction. In: Proceedings of the 29th USENIX Conference on Security Symposium, pp. 1309\u20131326 (2020)"},{"issue":"4","key":"19_CR4","doi-asserted-by":"publisher","first-page":"555","DOI":"10.1016\/j.jcss.2004.10.006","volume":"70","author":"S Dasgupta","year":"2005","unstructured":"Dasgupta, S., Long, P.M.: Performance guarantees for hierarchical clustering. J. Comput. Syst. Sci. 70(4), 555\u2013569 (2005)","journal-title":"J. Comput. Syst. Sci."},{"key":"19_CR5","unstructured":"Fan, L., Ng, K.W., Chan, C.S.: Rethinking deep neural network ownership verification: embedding passports to defeat ambiguity attacks. Adv. Neural Inf. Process. Syst. 32 (2019)"},{"key":"19_CR6","unstructured":"Fan, L., Ng, K.W., Chan, C.S., Yang, Q.: DeepIP: deep neural network intellectual property protection with passports. IEEE Trans. Pattern Anal. Mach. Intell.,\u00a01 (2021)"},{"key":"19_CR7","doi-asserted-by":"publisher","first-page":"8322","DOI":"10.1109\/TIFS.2024.3443650","volume":"19","author":"J Fei","year":"2024","unstructured":"Fei, J., Xia, Z., Tondi, B., Barni, M.: Wide flat minimum watermarking for robust ownership verification of GANs. IEEE Trans. Inf. Forensics Secur. 19, 8322\u20138337 (2024). https:\/\/doi.org\/10.1109\/TIFS.2024.3443650","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"19_CR8","doi-asserted-by":"crossref","unstructured":"Ge, Y., et al.: Anti-distillation backdoor attacks: backdoors can really survive in knowledge distillation. In: Proceedings of the 29th ACM International Conference on Multimedia, pp. 826\u2013834 (2021)","DOI":"10.1145\/3474085.3475254"},{"key":"19_CR9","doi-asserted-by":"publisher","first-page":"1789","DOI":"10.1007\/s11263-021-01453-z","volume":"129","author":"J Gou","year":"2021","unstructured":"Gou, J., Yu, B., Maybank, S.J., Tao, D.: Knowledge distillation: a survey. Int. J. Comput. Vision 129, 1789\u20131819 (2021)","journal-title":"Int. J. Comput. Vision"},{"key":"19_CR10","doi-asserted-by":"publisher","first-page":"36571","DOI":"10.52202\/068431-2650","volume":"35","author":"J Guan","year":"2022","unstructured":"Guan, J., Liang, J., He, R.: Are you stealing my model? Sample correlation for fingerprinting deep neural networks. Adv. Neural. Inf. Process. Syst. 35, 36571\u201336584 (2022)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"19_CR11","doi-asserted-by":"crossref","unstructured":"Guan, J., Tu, Z., He, R., Tao, D.: Few-shot backdoor defense using shapley estimation. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 13358\u201313367 (2022)","DOI":"10.1109\/CVPR52688.2022.01300"},{"key":"19_CR12","doi-asserted-by":"crossref","unstructured":"He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 770\u2013778 (2016)","DOI":"10.1109\/CVPR.2016.90"},{"issue":"1","key":"19_CR13","doi-asserted-by":"publisher","first-page":"81","DOI":"10.1080\/02763869.2018.1404391","volume":"37","author":"MB Hoy","year":"2018","unstructured":"Hoy, M.B.: Alexa, Siri, Cortana, and more: an introduction to voice assistants. Med. Ref. Serv. Q. 37(1), 81\u201388 (2018)","journal-title":"Med. Ref. Serv. Q."},{"issue":"8","key":"19_CR14","doi-asserted-by":"publisher","first-page":"11204","DOI":"10.1109\/TNNLS.2023.3250210","volume":"35","author":"G Hua","year":"2024","unstructured":"Hua, G., Teoh, A.B.J., Xiang, Y., Jiang, H.: Unambiguous and high-fidelity backdoor watermarking for deep neural networks. IEEE Trans. Neural Netw. Learn. Syst. 35(8), 11204\u201311217 (2024). https:\/\/doi.org\/10.1109\/TNNLS.2023.3250210","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"key":"19_CR15","doi-asserted-by":"crossref","unstructured":"Huang, G., Liu, Z., Van Der\u00a0Maaten, L., Weinberger, K.Q.: Densely connected convolutional networks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 4700\u20134708 (2017)","DOI":"10.1109\/CVPR.2017.243"},{"key":"19_CR16","unstructured":"Jagielski, M., Carlini, N., Berthelot, D., Kurakin, A., Papernot, N.: High accuracy and high fidelity extraction of neural networks. In: Proceedings of the 29th USENIX Conference on Security Symposium, pp. 1345\u20131362 (2020)"},{"key":"19_CR17","unstructured":"Jia, H., Choquette-Choo, C.A., Chandrasekaran, V., Papernot, N.: Entangled watermarks as a defense against model extraction. In: USENIX Security Symposium, pp. 1937\u20131954 (2021)"},{"key":"19_CR18","unstructured":"Krizhevsky, A., Hinton, G.: Learning multiple layers of features from tiny images. In: Handbook of Systemic Autoimmune Diseases, vol. 1, no. 4 (2009)"},{"issue":"10","key":"19_CR19","doi-asserted-by":"publisher","first-page":"13082","DOI":"10.1109\/TNNLS.2023.3270135","volume":"35","author":"I Lederer","year":"2024","unstructured":"Lederer, I., Mayer, R., Rauber, A.: Identifying appropriate intellectual property protection mechanisms for machine learning models: a systematization of watermarking, fingerprinting, model access, and attacks. IEEE Trans. Neural Netw. Learn. Syst. 35(10), 13082\u201313100 (2024). https:\/\/doi.org\/10.1109\/TNNLS.2023.3270135","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"key":"19_CR20","doi-asserted-by":"crossref","unstructured":"Li, Y., Zhu, L., Jia, X., Jiang, Y., Xia, S.T., Cao, X.: Defending against model stealing via verifying embedded external features. In: Proceedings of the AAAI Conference on Artificial Intelligence, pp. 1464\u20131472 (2022)","DOI":"10.1609\/aaai.v36i2.20036"},{"key":"19_CR21","doi-asserted-by":"crossref","unstructured":"Li, Y., Zhang, Z., Liu, B., Yang, Z., Liu, Y.: ModelDiff: testing-based DNN similarity comparison for model reuse detection. In: Proceedings of the 30th ACM SIGSOFT International Symposium on Software Testing and Analysis, pp. 139\u2013151 (2021)","DOI":"10.1145\/3460319.3464816"},{"key":"19_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"273","DOI":"10.1007\/978-3-030-00470-5_13","volume-title":"Research in Attacks, Intrusions, and Defenses","author":"K Liu","year":"2018","unstructured":"Liu, K., Dolan-Gavitt, B., Garg, S.: Fine-pruning: defending against backdooring attacks on deep neural networks. In: Bailey, M., Holz, T., Stamatogiannakis, M., Ioannidis, S. (eds.) RAID 2018. LNCS, vol. 11050, pp. 273\u2013294. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-00470-5_13"},{"key":"19_CR23","unstructured":"Lukas, N., Zhang, Y., Kerschbaum, F.: Deep neural network fingerprinting by conferrable adversarial examples. arXiv preprint arXiv:1912.00888 (2019)"},{"key":"19_CR24","unstructured":"MacQueen, J., et\u00a0al.: Some methods for classification and analysis of multivariate observations. In: Proceedings of the Fifth Berkeley Symposium on Mathematical Statistics and Probability, Oakland, CA, USA, vol.\u00a01, pp. 281\u2013297 (1967)"},{"key":"19_CR25","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017)"},{"key":"19_CR26","doi-asserted-by":"publisher","first-page":"5459","DOI":"10.1109\/TIFS.2023.3301268","volume":"18","author":"T Maho","year":"2023","unstructured":"Maho, T., Furon, T., Merrer, E.L.: Fingerprinting classifiers with benign inputs. IEEE Trans. Inf. Forensics Secur. 18, 5459\u20135472 (2023). https:\/\/doi.org\/10.1109\/TIFS.2023.3301268","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"19_CR27","doi-asserted-by":"crossref","unstructured":"Molchanov, P., Mallya, A., Tyree, S., Frosio, I., Kautz, J.: Importance estimation for neural network pruning. In: Proceedings of the IEEE\/CVF Conference on Computer Vision And Pattern Recognition, pp. 11264\u201311272 (2019)","DOI":"10.1109\/CVPR.2019.01152"},{"key":"19_CR28","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., Frossard, P.: DeepFool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 2574\u20132582 (2016)","DOI":"10.1109\/CVPR.2016.282"},{"key":"19_CR29","unstructured":"Ng, A., Jordan, M., Weiss, Y.: On spectral clustering: analysis and an algorithm. Adv. Neural Inf. Process. Syst. 14 (2001)"},{"key":"19_CR30","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"709","DOI":"10.1007\/978-3-642-19309-5_55","volume-title":"Computer Vision \u2013 ACCV 2010","author":"HV Nguyen","year":"2011","unstructured":"Nguyen, H.V., Bai, L.: Cosine similarity metric learning for face verification. In: Kimmel, R., Klette, R., Sugimoto, A. (eds.) ACCV 2010. LNCS, vol. 6493, pp. 709\u2013720. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-19309-5_55"},{"key":"19_CR31","doi-asserted-by":"crossref","unstructured":"Orekondy, T., Schiele, B., Fritz, M.: Knockoff nets: stealing functionality of black-box models. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 4954\u20134963 (2019)","DOI":"10.1109\/CVPR.2019.00509"},{"key":"19_CR32","doi-asserted-by":"crossref","unstructured":"Peng, Z., Li, S., Chen, G., Zhang, C., Zhu, H., Xue, M.: Fingerprinting deep neural networks globally via universal adversarial perturbations. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 13430\u201313439 (2022)","DOI":"10.1109\/CVPR52688.2022.01307"},{"key":"19_CR33","doi-asserted-by":"crossref","unstructured":"Taigman, Y., Yang, M., Ranzato, M., Wolf, L.: DeepFace: closing the gap to human-level performance in face verification. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 1701\u20131708 (2014)","DOI":"10.1109\/CVPR.2014.220"},{"issue":"5","key":"19_CR34","doi-asserted-by":"publisher","first-page":"1299","DOI":"10.1109\/TMI.2016.2535302","volume":"35","author":"N Tajbakhsh","year":"2016","unstructured":"Tajbakhsh, N., et al.: Convolutional neural networks for medical image analysis: full training or fine tuning? IEEE Trans. Med. Imaging 35(5), 1299\u20131312 (2016)","journal-title":"IEEE Trans. Med. Imaging"},{"key":"19_CR35","doi-asserted-by":"crossref","unstructured":"Truong, J.B., Maini, P., Walls, R.J., Papernot, N.: Data-free model extraction. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 4771\u20134780 (2021)","DOI":"10.1109\/CVPR46437.2021.00474"},{"key":"19_CR36","doi-asserted-by":"crossref","unstructured":"Uchida, Y., Nagai, Y., Sakazawa, S., Satoh, S.: Embedding watermarks into deep neural networks. In: Proceedings of the 2017 ACM on International Conference on Multimedia Retrieval, pp. 269\u2013277 (2017)","DOI":"10.1145\/3078971.3078974"},{"key":"19_CR37","unstructured":"Vaswani, A., et al.: Attention is all you need. Adv. Neural Inf. Process. Syst. 30 (2017)"},{"key":"19_CR38","doi-asserted-by":"crossref","unstructured":"Yang, K., Wang, R., Wang, L.: MetaFinger: fingerprinting the deep neural networks with meta-training. In: Thirty-First International Joint Conference on Artificial Intelligence, pp. 759\u2013765 (2022)","DOI":"10.24963\/ijcai.2022\/109"},{"key":"19_CR39","unstructured":"Zanella-Beguelin, S., Tople, S., Paverd, A., K\u00f6pf, B.: Grey-box extraction of natural language models. In: International Conference on Machine Learning, pp. 12278\u201312286. PMLR (2021)"},{"key":"19_CR40","first-page":"22619","volume":"33","author":"J Zhang","year":"2020","unstructured":"Zhang, J., Chen, D., Liao, J., Zhang, W., Hua, G., Yu, N.: Passport-aware normalization for deep model protection. Adv. Neural. Inf. Process. Syst. 33, 22619\u201322628 (2020)","journal-title":"Adv. Neural. Inf. Process. Syst."}],"container-title":["Lecture Notes in Computer Science","Machine Learning and Knowledge Discovery in Databases. Research Track"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-06096-9_19","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T10:22:47Z","timestamp":1777630967000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-06096-9_19"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,27]]},"ISBN":["9783032060952","9783032060969"],"references-count":40,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-06096-9_19","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,27]]},"assertion":[{"value":"27 September 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ECML PKDD","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Joint European Conference on Machine Learning and Knowledge Discovery in Databases","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Porto","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Portugal","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ecml2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/ecmlpkdd.org\/2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}