{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T09:53:01Z","timestamp":1781517181458,"version":"3.54.1"},"reference-count":74,"publisher":"Springer Science and Business Media LLC","issue":"7","license":[{"start":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T00:00:00Z","timestamp":1781481600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T00:00:00Z","timestamp":1781481600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62402535"],"award-info":[{"award-number":["62402535"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62025604"],"award-info":[{"award-number":["62025604"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62261160653"],"award-info":[{"award-number":["62261160653"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100021171","name":"Basic and Applied Basic Research Foundation of Guangdong Province","doi-asserted-by":"publisher","award":["2024A1515011887"],"award-info":[{"award-number":["2024A1515011887"]}],"id":[{"id":"10.13039\/501100021171","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100017610","name":"Shenzhen Science and Technology Innovation Program","doi-asserted-by":"publisher","award":["SYSRD20250529113401002"],"award-info":[{"award-number":["SYSRD20250529113401002"]}],"id":[{"id":"10.13039\/501100017610","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int J Comput Vis"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1007\/s11263-026-02896-y","type":"journal-article","created":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T09:03:26Z","timestamp":1781514206000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["SWAP: Towards Copyright Auditing of Soft Prompts via Sequential Watermarking"],"prefix":"10.1007","volume":"134","author":[{"given":"Wenyuan","family":"Yang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yichen","family":"Sun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Changzheng","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhixuan","family":"Chu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jiaheng","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2258-265X","authenticated-orcid":false,"given":"Yiming","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dacheng","family":"Tao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,6,15]]},"reference":[{"key":"2896_CR1","unstructured":"Radford, A., Kim, J. W., Hallacy, C., Ramesh, A., Goh, G., Agarwal, S., Sastry, G., Askell, A., Mishkin, P., & Clark, J. (2021). Learning transferable visual models from natural language supervision (p. ICML)"},{"key":"2896_CR2","doi-asserted-by":"crossref","unstructured":"Zhu, L., Wang, X., Feng, J., Cheng, T., Li, Y., Jiang, B., Zhang, D., & Han, J. (2025). Weakclip: Adapting clip for weakly-supervised semantic segmentation. International Journal of Computer Vision,","DOI":"10.1007\/s11263-024-02224-2"},{"key":"2896_CR3","doi-asserted-by":"crossref","unstructured":"Ventura, L., Schmid, C., & Varol, G. (2025). Learning text-to-video retrieval from image captioning. International Journal of Computer Vision,","DOI":"10.1007\/s11263-024-02202-8"},{"key":"2896_CR4","doi-asserted-by":"crossref","unstructured":"Wang, J., & Kang, G. (2025) Reclip++: Learn to rectify the bias of clip for unsupervised semantic segmentation. International Journal of Computer Vision","DOI":"10.1007\/s11263-025-02566-5"},{"key":"2896_CR5","doi-asserted-by":"crossref","unstructured":"Wang, X., Zhang, S., Cen, J., Gao, C., Zhang, Y., Zhao, D., & Sang, N. (2024) Clip-guided prototype modulating for few-shot action recognition. International Journal of Computer Vision","DOI":"10.1007\/s11263-023-01917-4"},{"key":"2896_CR6","doi-asserted-by":"crossref","unstructured":"Zhou, K., Yang, J., Loy, C. C., & Liu, Z. (2022). Conditional prompt learning for vision-language models. CVPR.","DOI":"10.1109\/CVPR52688.2022.01631"},{"key":"2896_CR7","doi-asserted-by":"crossref","unstructured":"Khattak, M.U., Rasheed, H., Maaz, M., Khan, S., & Khan, F.S. (2023) Maple: Multi-modal prompt learning. In: CVPR","DOI":"10.1109\/CVPR52729.2023.01832"},{"key":"2896_CR8","doi-asserted-by":"crossref","unstructured":"Khattak, M.U., Wasim, S.T., Naseer, M., Khan, S., Yang, M.-H., & Khan, F.S. (2023) Self-regulating prompts: Foundational model adaptation without forgetting. In: ICCV","DOI":"10.1109\/ICCV51070.2023.01394"},{"key":"2896_CR9","doi-asserted-by":"crossref","unstructured":"Bulat, A., & Tzimiropoulos, G. (2024) Language-aware soft prompting: Text-to-text optimization for few-and zero-shot adaptation of v & l models. International Journal of Computer Vision","DOI":"10.1007\/s11263-023-01904-9"},{"key":"2896_CR10","doi-asserted-by":"crossref","unstructured":"Gao, P., Geng, S., Zhang, R., Ma, T., Fang, R., Zhang, Y., Li, H., & Qiao, Y. (2024) Clip-adapter: Better vision-language models with feature adapters. International Journal of Computer Vision","DOI":"10.1007\/s11263-023-01891-x"},{"key":"2896_CR11","doi-asserted-by":"crossref","unstructured":"Zeng, R., Yang, Z., Yu, R., & Zhang, Y. (2025). Supplementary prompt learning for vision-language models. International Journal of Computer Vision,","DOI":"10.1007\/s11263-025-02451-1"},{"key":"2896_CR12","doi-asserted-by":"crossref","unstructured":"Jing, Y., Liang, K., Zhang, R., Sun, H., Li, Y., He, Z., & Ma, Z. (2025). Animal-clip: A dual-prompt enhanced vision-language model for animal action recognition. International Journal of Computer Vision,","DOI":"10.1007\/s11263-025-02408-4"},{"key":"2896_CR13","doi-asserted-by":"crossref","unstructured":"Zhou, K., Yang, J., Loy, C. C., & Liu, Z. (2022). Learning to prompt for vision-language models. International Journal of Computer Vision,","DOI":"10.1007\/s11263-022-01653-1"},{"key":"2896_CR14","unstructured":"Li, Y., Shao, S., He, Y., Guo, J., Zhang, T., Qin, Z., Chen, P.-Y., Backes, M., Torr, P., & Tao, D. (2025). Rethinking data protection in the (generative) artificial intelligence era arXiv:2507.03034 arXiv preprint."},{"key":"2896_CR15","unstructured":"Maini, P., Yaghini, M., & Papernot, N. (2021). Dataset inference: Ownership resolution in machine learning (p. ICLR)"},{"key":"2896_CR16","doi-asserted-by":"crossref","unstructured":"Peng, Z., Li, S., Chen, G., Zhang, C., Zhu, H., & Xue, M. (2022). Fingerprinting deep neural networks globally via universal adversarial perturbations. CVPR.","DOI":"10.1109\/CVPR52688.2022.01307"},{"key":"2896_CR17","unstructured":"Shao, S., Li, Y., He, Y., Yao, H., Yang, W., Tao, D., & Qin, Z. (2025). Sok: Large language model copyright auditing via fingerprinting arXiv:2508.19843 arXiv preprint."},{"key":"2896_CR18","doi-asserted-by":"crossref","unstructured":"Wang, Z., Guo, J., Zhu, J., Li, Y., Huang, H., Chen, M., & Tu, Z. (2025). Sleepermark: Towards robust watermark against fine-tuning text-to-image diffusion models. CVPR.","DOI":"10.1109\/CVPR52734.2025.00769"},{"key":"2896_CR19","unstructured":"Ya, M., Li, Y., Dai, T., Wang, B., Jiang, Y., & Xia, S.-T. (2023). Towards faithful xai evaluation via generalization-limited backdoor watermark (p. ICLR)"},{"key":"2896_CR20","doi-asserted-by":"crossref","unstructured":"Gan, G., Li, Y., Wu, D., & Xia, S.-T. (2023). Towards robust model watermark via reducing parametric vulnerability (p. ICCV)","DOI":"10.1109\/ICCV51070.2023.00438"},{"key":"2896_CR21","unstructured":"Nguyen, A., & Tran, A. (2021). Wanet-imperceptible warping-based backdoor attack. ICLR,"},{"key":"2896_CR22","doi-asserted-by":"crossref","unstructured":"Liu, A., Liu, X., Zhang, X., Xiao, Y., Zhou, Y., Liang, S., Wang, J., Cao, X., & Tao, D. (2025) Pre-trained trojan attacks for visual recognition. International Journal of Computer Vision","DOI":"10.1007\/s11263-024-02333-y"},{"key":"2896_CR23","doi-asserted-by":"crossref","unstructured":"Liang, J., Liang, S., Liu, A., & Cao, X. (2025) Vl-trojan: Multimodal instruction backdoor attacks against autoregressive visual language models. International Journal of Computer Vision","DOI":"10.1007\/s11263-025-02368-9"},{"key":"2896_CR24","unstructured":"Guo, J., Li, Y., Chen, R., Wu, Y., Liu, C., & Huang, H. (2024) Zeromark: Towards dataset ownership verification without disclosing watermarks. In: NeurIPS"},{"key":"2896_CR25","doi-asserted-by":"crossref","unstructured":"Li, B., Wei, Y., Fu, Y., Wang, Z., Li, Y., Zhang, J., Wang, R., & Zhang, T. (2025) Towards reliable verification of unauthorized data usage in personalized text-to-image diffusion models. In: S & P","DOI":"10.1109\/SP61157.2025.00073"},{"key":"2896_CR26","doi-asserted-by":"crossref","unstructured":"Shao, S., Li, Y., Yao, H., He, Y., Qin, Z., & Ren, K. (2025). Explanation as a watermark: Towards harmless and multi-bit model ownership verification via watermarking feature attribution (p. NDSS)","DOI":"10.14722\/ndss.2025.230338"},{"key":"2896_CR27","doi-asserted-by":"crossref","unstructured":"Li, Y., Zhu, L., Jia, X., Bai, Y., Jiang, Y., Xia, S.-T., Cao, X., & Ren, K. (2025) Move: Effective and harmless ownership verification via embedded external features. IEEE Transactions on Pattern Analysis and Machine Intelligence","DOI":"10.1109\/TPAMI.2025.3546223"},{"key":"2896_CR28","unstructured":"Fan, L., Ng, K. W., & Chan, C. S. (2019). Rethinking deep neural network ownership verification: Embedding passports to defeat ambiguity attacks. NeruIPS,"},{"key":"2896_CR29","doi-asserted-by":"crossref","unstructured":"Zhai, X., Wang, X., Mustafa, B., Steiner, A., Keysers, D., Kolesnikov, A., & Beyer, L. (2022). Lit: Zero-shot transfer with locked-image text tuning. CVPR.","DOI":"10.1109\/CVPR52688.2022.01759"},{"key":"2896_CR30","unstructured":"Jia, C., Yang, Y., Xia, Y., Chen, Y.-T., Parekh, Z., Pham, H., Le, Q., Sung, Y.-H., Li, Z., & Duerig, T. (2021). Scaling up visual and vision-language representation learning with noisy text supervision (p. ICML)"},{"key":"2896_CR31","unstructured":"Yu, J., Wang, Z., Vasudevan, V., Yeung, L., Seyedhosseini, M., & Wu, Y. (2022). Coca: Contrastive captioners are image-text foundation models. Transactions on Machine Learning Research,"},{"key":"2896_CR32","doi-asserted-by":"crossref","unstructured":"Xu, C., Zhu, Y., Shen, H., Chen, B., Liao, Y., Chen, X., & Wang, L. (2025) Progressive visual prompt learning with contrastive feature re-formation. International Journal of Computer Vision","DOI":"10.1007\/s11263-024-02172-x"},{"key":"2896_CR33","doi-asserted-by":"crossref","unstructured":"Li, Z., Song, Y., Cheng, M.-M., Li, X., & Yang, J. (2025) Advancing textual prompt learning with anchored attributes. In: ICCV","DOI":"10.1109\/ICCV51701.2025.00345"},{"key":"2896_CR34","doi-asserted-by":"crossref","unstructured":"Du, L., Zhou, X., Chen, M., Zhang, C., Su, Z., Cheng, P., Chen, J., & Zhang, Z. (2025) Sok: Dataset copyright auditing in machine learning systems. In: S & P","DOI":"10.1109\/SP61157.2025.00025"},{"key":"2896_CR35","unstructured":"Shao, S., Li, Y., Zheng, M., Hu, Z., Chen, Y., Li, B., He, Y., Guo, J., Tao, D., & Qin, Z. (2025) Databench: Evaluating dataset auditing in deep learning from an adversarial perspective. arXiv preprint arXiv:2507.05622"},{"key":"2896_CR36","doi-asserted-by":"crossref","unstructured":"Li, Y., Zhu, M., Yang, X., Jiang, Y., Wei, T., & Xia, S.-T. (2023). Black-box dataset ownership verification via backdoor watermarking. IEEE Transactions on Information Forensics and Security,","DOI":"10.1109\/TIFS.2023.3265535"},{"key":"2896_CR37","unstructured":"Dziedzic, A., Duan, H., Kaleem, M. A., Dhawan, N., Guan, J., Cattan, Y., Boenisch, F., & Papernot, N. (2022). Dataset inference for self-supervised models. NeurIPS."},{"key":"2896_CR38","unstructured":"Xu, T., Wang, C., Liu, G., Yang, Y., Peng, K., & Liu, W. (2024) United we stand, divided we fall: Fingerprinting deep neural networks via adversarial trajectories. In: NeurIPS"},{"key":"2896_CR39","unstructured":"Gu, T., Dolan-Gavitt, B., & Garg, S. (2017). Badnets: Identifying vulnerabilities in the machine learning model supply chain arXiv:1708.06733 arXiv preprint."},{"key":"2896_CR40","unstructured":"Yang, Z., He, X., Li, Z., Backes, M., Humbert, M., Berrang, P., & Zhang, Y. (2023). Data poisoning attacks against multimodal encoders (p. ICML)"},{"key":"2896_CR41","doi-asserted-by":"crossref","unstructured":"Bai, J., Gao, K., Min, S., Xia, S.-T., Li, Z., & Liu, W. (2024) Badclip: Trigger-aware prompt learning for backdoor attacks on clip. In: CVPR","DOI":"10.1109\/CVPR52733.2024.02288"},{"key":"2896_CR42","doi-asserted-by":"crossref","unstructured":"Liang, S., Zhu, M., Liu, A., Wu, B., Cao, X., & Chang, E.-C. (2024). Badclip: Dual-embedding guided backdoor attack on multimodal contrastive learning. CVPR.","DOI":"10.1109\/CVPR52733.2024.02327"},{"key":"2896_CR43","doi-asserted-by":"crossref","unstructured":"Jia, J., Liu, Y., & Gong, N.Z. (2022) Badencoder: Backdoor attacks to pre-trained encoders in self-supervised learning. In: S & P","DOI":"10.1109\/SP46214.2022.9833644"},{"key":"2896_CR44","unstructured":"Tang, Y., Yu, J., Gai, K., Qu, X., Hu, Y., Xiong, G., & Wu, Q. (2023). Watermarking vision-language pre-trained models for multi-modal embedding as a service arXiv:2311.05863 arXiv preprint."},{"key":"2896_CR45","unstructured":"Gao, J., Gai, K., Yu, J., Zhu, L., & Wu, Q. (2025). Agate: Stealthy black-box watermarking for multimodal model copyright protection arXiv:2504.21044 arXiv preprint."},{"key":"2896_CR46","unstructured":"Fei-Fei, L., Fergus, R., & Perona, P. (2004). Learning generative visual models from few training examples: An incremental bayesian approach tested on 101 object categories. CVPR Workshop"},{"key":"2896_CR47","doi-asserted-by":"crossref","unstructured":"Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., & Fei-Fei, L. (2009) Imagenet: A large-scale hierarchical image database. In: CVPR","DOI":"10.1109\/CVPR.2009.5206848"},{"key":"2896_CR48","doi-asserted-by":"crossref","unstructured":"Parkhi, O. M., Vedaldi, A., Zisserman, A., & Jawahar, C. (2012). Cats and dogs. CVPR.","DOI":"10.1109\/CVPR.2012.6248092"},{"key":"2896_CR49","unstructured":"Larsen, R.J., & Marx, M.L. (2005) An Introduction to Mathematical Statistics. Prentice Hall Hoboken, NJ."},{"key":"2896_CR50","doi-asserted-by":"crossref","unstructured":"Xu, X., Liu, Z., Koffas, S., & Picek, S. (2025). Towards backdoor stealthiness in model parameter space (p. CCS)","DOI":"10.1145\/3719027.3744846"},{"key":"2896_CR51","doi-asserted-by":"crossref","unstructured":"Guo, J., Li, Y., Wang, L., Xia, S.-T., Huang, H., Liu, C., & Li, B. (2023) Domain watermark: Effective and harmless dataset copyright protection is closed at hand. In: NeurIPS","DOI":"10.52202\/075280-2371"},{"key":"2896_CR52","doi-asserted-by":"crossref","unstructured":"Hendrycks, D., Zhao, K., Basart, S., Steinhardt, J., & Song, D. (2021). Natural adversarial examples. CVPR.","DOI":"10.1109\/CVPR46437.2021.01501"},{"key":"2896_CR53","doi-asserted-by":"crossref","unstructured":"Hendrycks, D., Basart, S., Mu, N., Kadavath, S., Wang, F., Dorundo, E., Desai, R., Zhu, T., Parajuli, S., & Guo, M. (2021). The many faces of robustness: A critical analysis of out-of-distribution generalization (p. ICCV)","DOI":"10.1109\/ICCV48922.2021.00823"},{"key":"2896_CR54","unstructured":"Wang, H., Ge, S., Lipton, Z., & Xing, E. P. (2019). Learning robust global representations by penalizing local predictive power. NeruIPS,"},{"key":"2896_CR55","unstructured":"Recht, B., Roelofs, R., Schmidt, L., & Shankar, V. (2019). Do imagenet classifiers generalize to imagenet? In: ICML"},{"key":"2896_CR56","doi-asserted-by":"crossref","unstructured":"Liu, Y., Xie, Y., & Srivastava, A. (2017) Neural trojans. In: ICCD","DOI":"10.1109\/ICCD.2017.16"},{"key":"2896_CR57","unstructured":"Han, S., Pool, J., Tran, J., & Dally, W. (2015). Learning both weights and connections for efficient neural network. NeurIPS,"},{"key":"2896_CR58","doi-asserted-by":"crossref","unstructured":"Waheed, A., Duddu, V., & Asokan, N. (2024) Grove: Ownership verification of graph neural networks using embeddings. In: S & P","DOI":"10.1109\/SP54263.2024.00050"},{"key":"2896_CR59","unstructured":"Maaten, L., & Hinton, G. (2008). Visualizing data using t-sne. Journal of machine learning research,"},{"key":"2896_CR60","unstructured":"Krizhevsky, A., & Hinton, G. (2009). Learning multiple layers of features from tiny images"},{"key":"2896_CR61","doi-asserted-by":"crossref","unstructured":"Krause, J., Stark, M., Deng, J., & Fei-Fei, L. (2013). 3d object representations for fine-grained categorization (p. ICCV)","DOI":"10.1109\/ICCVW.2013.77"},{"key":"2896_CR62","doi-asserted-by":"crossref","unstructured":"Nilsback, M.-E., & Zisserman, A. (2008). Automated flower classification over a large number of classes. ICVGIP,","DOI":"10.1109\/ICVGIP.2008.47"},{"key":"2896_CR63","doi-asserted-by":"crossref","unstructured":"Bossard, L., Guillaumin, M., & Van Gool, L. (2014). Food-101-mining discriminative components with random forests. ECCV.","DOI":"10.1007\/978-3-319-10599-4_29"},{"key":"2896_CR64","unstructured":"Maji, S., Rahtu, E., Kannala, J., Blaschko, M., & Vedaldi, A. (2013). Fine-grained visual classification of aircraft arXiv:1306.5151 arXiv preprint."},{"key":"2896_CR65","doi-asserted-by":"crossref","unstructured":"Xiao, J., Hays, J., Ehinger, K. A., Oliva, A., & Torralba, A. (2010). Sun database: Large-scale scene recognition from abbey to zoo. CVPR.","DOI":"10.1109\/CVPR.2010.5539970"},{"key":"2896_CR66","unstructured":"Soomro, K., Zamir, A. R., & Shah, M. (2012). A dataset of 101 human action classes from videos in the wild. Center for Research in Computer Vision."},{"key":"2896_CR67","doi-asserted-by":"crossref","unstructured":"Cimpoi, M., Maji, S., Kokkinos, I., Mohamed, S., & Vedaldi, A. (2014). Describing textures in the wild. CVPR.","DOI":"10.1109\/CVPR.2014.461"},{"key":"2896_CR68","doi-asserted-by":"crossref","unstructured":"Helber, P., Bischke, B., Dengel, A., & Borth, D. (2019). Eurosat: A novel dataset and deep learning benchmark for land use and land cover classification. IEEE Journal of Selected Topics in Applied Earth Observations and Remote Sensing,","DOI":"10.1109\/JSTARS.2019.2918242"},{"key":"2896_CR69","doi-asserted-by":"crossref","unstructured":"Andreescu, T., Mortici, C., Tetiva, M., Andreescu, T., Mortici, C., & Tetiva, M. (2017) The intermediate value theorem. Mathematical Bridges, 189\u2013200","DOI":"10.1007\/978-0-8176-4629-5_11"},{"key":"2896_CR70","unstructured":"Chen, X., Liu, C., Li, B., Lu, K., & Song, D. (2017). Targeted backdoor attacks on deep learning systems using data poisoning arXiv:1712.05526 arXiv preprint."},{"key":"2896_CR71","doi-asserted-by":"crossref","unstructured":"Li, Y., Li, Y., Wu, B., Li, L., He, R., & Lyu, S. (2021) Invisible backdoor attack with sample-specific triggers. In: ICCV","DOI":"10.1109\/ICCV48922.2021.01615"},{"key":"2896_CR72","unstructured":"Bai, J., Wu, B., Zhang, Y., Li, Y., Li, Z., & Xia, S.-T. (2021) Targeted attack against deep neural networks via flipping limited weight bits. In: ICLR"},{"key":"2896_CR73","doi-asserted-by":"crossref","unstructured":"Xu, T., Li, Y., Jiang, Y., & Xia, S.-T. (2023). Batt: Backdoor attack with transformation-based triggers. ICASSP,","DOI":"10.1109\/ICASSP49357.2023.10096034"},{"key":"2896_CR74","unstructured":"Carlini, N., & Terzis, A. (2022). Poisoning and backdooring contrastive learning (p. ICLR)"}],"container-title":["International Journal of Computer Vision"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11263-026-02896-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11263-026-02896-y","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11263-026-02896-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,15]],"date-time":"2026-06-15T09:05:06Z","timestamp":1781514306000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11263-026-02896-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,15]]},"references-count":74,"journal-issue":{"issue":"7","published-print":{"date-parts":[[2026,7]]}},"alternative-id":["2896"],"URL":"https:\/\/doi.org\/10.1007\/s11263-026-02896-y","relation":{},"ISSN":["0920-5691","1573-1405"],"issn-type":[{"value":"0920-5691","type":"print"},{"value":"1573-1405","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,15]]},"assertion":[{"value":"5 November 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"13 May 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"15 June 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}],"article-number":"319"}}