{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,8]],"date-time":"2025-06-08T14:40:07Z","timestamp":1749393607612,"version":"3.41.0"},"publisher-location":"Singapore","reference-count":36,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819665983","type":"print"},{"value":"9789819665969","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-981-96-6596-9_18","type":"book-chapter","created":{"date-parts":[[2025,6,8]],"date-time":"2025-06-08T14:13:59Z","timestamp":1749392039000},"page":"253-268","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["SegDaemon: Actively Protecting Semantic Segmentation Models Against Intellectual Property Infringement"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6307-5972","authenticated-orcid":false,"given":"Ge","family":"Ren","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3913-5001","authenticated-orcid":false,"given":"Gaolei","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bo","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaoyang","family":"Jiang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shiyong","family":"Qiu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Liangjie","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7474-6452","authenticated-orcid":false,"given":"Wei","family":"Du","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shuilin","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hao","family":"Peng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0767-2307","authenticated-orcid":false,"given":"Shenghong","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,6,8]]},"reference":[{"key":"18_CR1","unstructured":"Adi, Y., Baum, C., Ciss\u00e9, M., Pinkas, B., Keshet, J.: Turning your weakness into a strength: watermarking deep neural networks by backdooring. In: 27th USENIX Security Symposium, pp. 1615\u20131631 (2018)"},{"key":"18_CR2","doi-asserted-by":"crossref","unstructured":"Alam, M., Saha, S., Mukhopadhyay, D., Kundu, S.: NN-Lock: a lightweight authorization to prevent IP threats of deep learning models. J. Emerg. Technol. Comput. Syst. 18 (2022)","DOI":"10.1145\/3505634"},{"issue":"12","key":"18_CR3","doi-asserted-by":"publisher","first-page":"2481","DOI":"10.1109\/TPAMI.2016.2644615","volume":"39","author":"V Badrinarayanan","year":"2017","unstructured":"Badrinarayanan, V., Kendall, A., Cipolla, R.: SegNet: a deep convolutional encoder-decoder architecture for image segmentation. IEEE Trans. Pattern Anal. Mach. Intell. 39(12), 2481\u20132495 (2017)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"18_CR4","doi-asserted-by":"crossref","unstructured":"Bai, H., Wang, P., Zhang, R., Su, Z.: SegFormer: a topic segmentation model with controllable range of attention. In: Williams, B., Chen, Y., Neville, J. (eds.) Thirty-Seventh AAAI Conference on Artificial Intelligence, AAAI 2023, pp. 12545\u201312552. AAAI Press (2023)","DOI":"10.1609\/aaai.v37i11.26477"},{"key":"18_CR5","doi-asserted-by":"crossref","unstructured":"Chakraborty, A., Mondal, A., Srivastava, A.: Hardware-assisted intellectual property protection of deep learning models. In: 57th ACM\/IEEE Design Automation Conference, DAC 2020, pp.\u00a01\u20136 (2020)","DOI":"10.1109\/DAC18072.2020.9218651"},{"key":"18_CR6","doi-asserted-by":"crossref","unstructured":"Charles, S., Bindschaedler, V., Mishra, P.: Digital watermarking for detecting malicious intellectual property cores in NoC architectures. IEEE Transactions on Very Large Scale Integration (VLSI) Systems (2022)","DOI":"10.1109\/TVLSI.2022.3167606"},{"key":"18_CR7","doi-asserted-by":"crossref","unstructured":"Chen, L., Yang, Y., Wang, J., Xu, W., Yuille, A.L.: Attention to scale: scale-aware semantic image segmentation. In: 2016 IEEE Conference on Computer Vision and Pattern Recognition, CVPR 2016, Las Vegas, NV, USA, June 27-30, 2016, pp. 3640\u20133649. IEEE Computer Society (2016)","DOI":"10.1109\/CVPR.2016.396"},{"key":"18_CR8","doi-asserted-by":"crossref","unstructured":"Cong, T., He, X., Zhang, Y.: SSLGuard: a watermarking scheme for self-supervised learning pre-trained encoders. In: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security, CCS 2022, pp. 579\u2013593 (2022)","DOI":"10.1145\/3548606.3559355"},{"key":"18_CR9","unstructured":"Fan, L., Ng, K.W., Chan, C.S.: Rethinking deep neural network ownership verification: Embedding passports to defeat ambiguity attacks. In: Annual Conference on Neural Information Processing Systems, NeurIPS 2019, pp. 4716\u20134725 (2019)"},{"key":"18_CR10","unstructured":"Fan, L., Ng, K.W., Chan, C.S., Yang, Q.: DeepIP: deep neural network intellectual property protection with passports. IEEE Transactions on Pattern Analysis and Machine Intelligence (2021)"},{"key":"18_CR11","doi-asserted-by":"crossref","unstructured":"Fu, J., et al.: Dual attention network for scene segmentation. In: IEEE Conference on Computer Vision and Pattern Recognition, CVPR 2019, Long Beach, CA, USA, June 16-20, 2019, pp. 3146\u20133154. Computer Vision Foundation\/IEEE (2019)","DOI":"10.1109\/CVPR.2019.00326"},{"key":"18_CR12","doi-asserted-by":"publisher","unstructured":"Huang, W., Li, G., Yi, X., Li, J., Zhao, C., Yin, Y.: SupRTE: suppressing backdoor injection in federated learning via robust trust evaluation. IEEE Intell. Syst. 1\u201310 (2024). https:\/\/doi.org\/10.1109\/MIS.2024.3392334","DOI":"10.1109\/MIS.2024.3392334"},{"key":"18_CR13","unstructured":"Jia, H., Choquette-Choo, C.A., Chandrasekaran, V., Papernot, N.: Entangled watermarks as a defense against model extraction. In: 30th USENIX Security Symposium (2021)"},{"key":"18_CR14","doi-asserted-by":"crossref","unstructured":"Lee, S., Song, W., Jana, S., Cha, M., Son, S.: Evaluating the robustness of trigger set-based watermarks embedded in deep neural networks. IEEE Trans. Dependable Secure Comput. (2022)","DOI":"10.1109\/TDSC.2022.3196790"},{"key":"18_CR15","doi-asserted-by":"crossref","unstructured":"Li, G., Wu, J., Li, S., Yang, W., Li, C.: Multi-tentacle federated learning over software-defined industrial internet of things against adaptive poisoning attacks. IEEE Transactions on Industrial Informatics (2023)","DOI":"10.1109\/TII.2022.3173996"},{"key":"18_CR16","doi-asserted-by":"crossref","unstructured":"Lin, N., Chen, X., Lu, H., Li, X.: Chaotic weights: a novel approach to protect intellectual property of deep neural networks. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems (2021)","DOI":"10.1109\/TCAD.2020.3018403"},{"key":"18_CR17","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103365","volume":"132","author":"J Mao","year":"2023","unstructured":"Mao, J., et al.: Object-free backdoor attack and defense on semantic segmentation. Comput. Secur. 132, 103365 (2023)","journal-title":"Comput. Secur."},{"key":"18_CR18","doi-asserted-by":"crossref","unstructured":"Ren, G., Li, G., Li, S., Chen, L., Ren, K.: ActiveDaemon: unconscious DNN dormancy and waking up via user-specific invisible token. In: 31th Annual Network and Distributed System Security Symposium, NDSS 2024, San Diego, California, USA. The Internet Society (2024)","DOI":"10.14722\/ndss.2024.24588"},{"key":"18_CR19","unstructured":"Ren, G., Wu, J., Li, G., Li, S., Guizani, M.: Protecting intellectual property with reliable availability of learning models in AI-based cybersecurity services. IEEE Transactions on Dependable and Secure Computing (2022)"},{"key":"18_CR20","doi-asserted-by":"crossref","unstructured":"Ronneberger, O., Fischer, P., Brox, T.: U-Net: convolutional networks for biomedical image segmentation. In: Navab, N., Hornegger, J., III, W.M.W., Frangi, A.F. (eds.) Medical Image Computing and Computer-Assisted Intervention - MICCAI 2015 - 18th International Conference Munich, Germany, October 5 - 9, 2015, Proceedings, Part III. LNCS, vol.\u00a09351, pp. 234\u2013241. Springer (2015)","DOI":"10.1007\/978-3-319-24574-4_28"},{"key":"18_CR21","doi-asserted-by":"crossref","unstructured":"Rouhani, B.D., Chen, H., Koushanfar, F.: DeepSigns: an end-to-end watermarking framework for ownership protection of deep neural networks. In: Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems, ASPLOS 2019, pp. 485\u2013497 (2019)","DOI":"10.1145\/3297858.3304051"},{"issue":"1","key":"18_CR22","doi-asserted-by":"publisher","DOI":"10.1007\/s11704-021-1186-y","volume":"17","author":"H Ruan","year":"2023","unstructured":"Ruan, H., Song, H., Liu, B., Cheng, Y., Liu, Q.: Intellectual property protection for deep semantic segmentation models. Frontiers Comput. Sci. 17(1), 171306 (2023)","journal-title":"Frontiers Comput. Sci."},{"key":"18_CR23","doi-asserted-by":"publisher","unstructured":"Shao, C., Li, G., Wu, J., Zheng, X.: Exploring semantic redundancy using backdoor triggers: a complementary insight into the challenges facing DNN-based software vulnerability detection. ACM Trans. Softw. Eng. Methodol. 33(4) (2024). https:\/\/doi.org\/10.1145\/3640333","DOI":"10.1145\/3640333"},{"key":"18_CR24","unstructured":"da\u00a0Silva, J.R.C., Berriel, R.F., Badue, C., Souza, A.F.D., Oliveira-Santos, T.: Copycat CNN: are random non-labeled data enough to steal knowledge from black-box models? Pattern Recognit. (2021)"},{"key":"18_CR25","unstructured":"Tang, R., Du, M., Hu, X.: Deep serial number: Computational watermarking for DNN intellectual property protection. CoRR abs\/2011.08960 (2020). https:\/\/arxiv.org\/abs\/2011.08960"},{"key":"18_CR26","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2023.106669","volume":"126","author":"M Thisanke","year":"2023","unstructured":"Thisanke, M., Deshan, L., Chamith, K., Seneviratne, S., Vidanaarachchi, R., Herath, D.: Semantic segmentation using vision transformers: a survey. Eng. Appl. Artif. Intell. 126, 106669 (2023)","journal-title":"Eng. Appl. Artif. Intell."},{"key":"18_CR27","unstructured":"Tram\u00e8r, F., Zhang, F., Juels, A., Reiter, M.K., Ristenpart, T.: Stealing machine learning models via prediction APIs. In: 25th USENIX Security Symposium, pp. 601\u2013618 (2016)"},{"key":"18_CR28","doi-asserted-by":"crossref","unstructured":"Uchida, Y., Nagai, Y., Sakazawa, S., Satoh, S.: Embedding watermarks into deep neural networks. In: Ionescu, B., Sebe, N., Feng, J., Larson, M.A., Lienhart, R., Snoek, C. (eds.) Proceedings of the ACM on International Conference on Multimedia Retrieval, ICMR 2017, pp. 269\u2013277 (2017)","DOI":"10.1145\/3078971.3078974"},{"key":"18_CR29","doi-asserted-by":"crossref","unstructured":"Wang, B., Gong, N.Z.: Stealing hyperparameters in machine learning. In: IEEE Symposium on Security and Privacy, SP 2018, pp. 36\u201352 (2018)","DOI":"10.1109\/SP.2018.00038"},{"key":"18_CR30","doi-asserted-by":"crossref","unstructured":"Wang, T., Kerschbaum, F.: RIGA: covert and robust white-box watermarking of deep neural networks. In: The Web Conference, WWW 2021 (2021)","DOI":"10.1145\/3442381.3450000"},{"issue":"3\u20134","key":"18_CR31","doi-asserted-by":"publisher","first-page":"111","DOI":"10.1049\/cdt2.12056","volume":"17","author":"M Xue","year":"2023","unstructured":"Xue, M., et al.: ActiveGuard: an active intellectual property protection technique for deep neural networks by leveraging adversarial examples as users\u2019 fingerprints. IET Comput. Digit. Tech. 17(3\u20134), 111\u2013126 (2023)","journal-title":"IET Comput. Digit. Tech."},{"key":"18_CR32","unstructured":"Xue, M., Sun, S., He, C., Zhang, Y., Wang, J., Liu, W.: ActiveGuard: An active DNN IP protection technique via adversarial examples. CoRR abs\/2103.01527 (2021)"},{"issue":"14","key":"18_CR33","doi-asserted-by":"publisher","first-page":"16497","DOI":"10.1007\/s10489-022-03339-0","volume":"52","author":"M Xue","year":"2022","unstructured":"Xue, M., Sun, S., Zhang, Y., Wang, J., Liu, W.: Active intellectual property protection for deep neural networks through stealthy backdoor and users\u2019 identities authentication. Appl. Intell. 52(14), 16497\u201316511 (2022)","journal-title":"Appl. Intell."},{"key":"18_CR34","doi-asserted-by":"crossref","unstructured":"Xue, M., Wu, Z., He, C., Wang, J., Liu, W.: Active DNN IP protection: a novel user fingerprint management and DNN authorization control technique. In: 19th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, TrustCom 2020, pp. 975\u2013982 (2020)","DOI":"10.1109\/TrustCom50675.2020.00130"},{"key":"18_CR35","doi-asserted-by":"crossref","unstructured":"Zhang, J., et al.: Protecting intellectual property of deep neural networks with watermarking. In: ACM Asia Conference on Computer and Communications Security, ASIACCS 2018, Incheon, pp. 159\u2013172 (2018)","DOI":"10.1145\/3196494.3196550"},{"key":"18_CR36","doi-asserted-by":"crossref","unstructured":"Zhang, Z., Chen, Y., Wagner, D.: SEAT: similarity encoder by adversarial training for detecting model extraction attack queries. In: Proceedings of the ACM SIGSAC Conference on Computer and Communications Security, CCS 2021 (2021)","DOI":"10.1145\/3474369.3486863"}],"container-title":["Lecture Notes in Computer Science","Neural Information Processing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-96-6596-9_18","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,8]],"date-time":"2025-06-08T14:14:07Z","timestamp":1749392047000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-96-6596-9_18"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9789819665983","9789819665969"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-981-96-6596-9_18","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"8 June 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICONIP","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Neural Information Processing","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Auckland","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"New Zealand","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2 December 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"6 December 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iconip2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/iconip2024.org","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}