{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T09:18:01Z","timestamp":1783070281307,"version":"3.54.6"},"reference-count":37,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62172280"],"award-info":[{"award-number":["62172280"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62502312"],"award-info":[{"award-number":["62502312"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62571333"],"award-info":[{"award-number":["62571333"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003395","name":"Shanghai Municipal Education Commission","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100003395","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100015796","name":"Shanghai Lingjun Program","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100015796","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Information Fusion"],"published-print":{"date-parts":[[2026,11]]},"DOI":"10.1016\/j.inffus.2026.104487","type":"journal-article","created":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T02:55:19Z","timestamp":1778813719000},"page":"104487","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["INNA: An invertible neural network-based attack framework for robust image watermarking"],"prefix":"10.1016","volume":"135","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-5300-5964","authenticated-orcid":false,"given":"Yanchun","family":"Peng","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5672-8979","authenticated-orcid":false,"given":"Na","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0370-4623","authenticated-orcid":false,"given":"Chuan","family":"Qin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Guorui","family":"Feng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xinpeng","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"issue":"12","key":"10.1016\/j.inffus.2026.104487_bib0001","doi-asserted-by":"crossref","first-page":"4826","DOI":"10.1109\/TCSVT.2021.3055255","article-title":"Local geometric distortions resilient watermarking scheme based on symmetry","volume":"31","author":"Ma","year":"2021","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"key":"10.1016\/j.inffus.2026.104487_bib0002","series-title":"2020 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"2114","article-title":"Stegastamp: invisible hyperlinks in physical photographs","author":"Tancik","year":"2020"},{"key":"10.1016\/j.inffus.2026.104487_bib0003","doi-asserted-by":"crossref","DOI":"10.1016\/j.inffus.2025.103801","article-title":"Diffmark: diffusion-based robust watermark against deepfakes","volume":"127","author":"Sun","year":"2026","journal-title":"Inf. Fusion"},{"issue":"11","key":"10.1016\/j.inffus.2026.104487_bib0004","doi-asserted-by":"crossref","first-page":"10874","DOI":"10.1109\/TCSVT.2024.3411816","article-title":"Camera-Shooting resilient watermarking on image instance level","volume":"34","author":"He","year":"2024","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"issue":"2","key":"10.1016\/j.inffus.2026.104487_bib0005","doi-asserted-by":"crossref","first-page":"1602","DOI":"10.1109\/TCSVT.2024.3474029","article-title":"Robust image watermarking with synchronization using template enhanced-Extracted network","volume":"35","author":"Wang","year":"2025","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"key":"10.1016\/j.inffus.2026.104487_bib0006","doi-asserted-by":"crossref","first-page":"5156","DOI":"10.1109\/TMM.2025.3543079","article-title":"Robust watermarking based on multi-Layer watermark feature fusion","volume":"27","author":"Wu","year":"2025","journal-title":"IEEE Trans. Multimed."},{"key":"10.1016\/j.inffus.2026.104487_bib0007","series-title":"IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)","first-page":"3054","article-title":"Watermarking images in self-Supervised latent spaces","author":"Fernandez","year":"2022"},{"issue":"3","key":"10.1016\/j.inffus.2026.104487_bib0008","first-page":"2888","article-title":"CoSDA: enhancing the robustness of inversion-based generative image watermarking framework","volume":"39","author":"Fang","year":"2025","journal-title":"Proc. AAAI Conf. Artif. Intell."},{"key":"10.1016\/j.inffus.2026.104487_bib0009","series-title":"Information Hiding","first-page":"218","article-title":"Attacks on copyright marking systems","author":"Petitcolas","year":"1998"},{"key":"10.1016\/j.inffus.2026.104487_bib0010","series-title":"Security and Watermarking of Multimedia Contents IV","first-page":"293","article-title":"Attacks, applications, and evaluation of known watermarking algorithms with checkmark","volume":"4675","author":"Meerwald","year":"2002"},{"key":"10.1016\/j.inffus.2026.104487_bib0011","series-title":"2018 26th European Signal Processing Conference (EUSIPCO)","first-page":"519","article-title":"Adversarial machine learning against digital watermarking","author":"Quiring","year":"2018"},{"key":"10.1016\/j.inffus.2026.104487_bib0012","first-page":"160","article-title":"Visible watermark removal scheme based on reversible data hiding and image inpainting","volume":"60","author":"Qin","year":"2018","journal-title":"Signal Process.: Image Commun."},{"issue":"11","key":"10.1016\/j.inffus.2026.104487_bib0013","doi-asserted-by":"crossref","first-page":"7460","DOI":"10.1109\/TCSVT.2022.3188524","article-title":"RD-IWAN: Residual dense based imperceptible watermark attack network","volume":"32","author":"Wang","year":"2022","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"issue":"8","key":"10.1016\/j.inffus.2026.104487_bib0014","doi-asserted-by":"crossref","first-page":"5695","DOI":"10.1109\/TCSVT.2021.3138795","article-title":"Concealed attack for robust watermarking based on generative model and perceptual loss","volume":"32","author":"Li","year":"2022","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"issue":"1","key":"10.1016\/j.inffus.2026.104487_bib0015","doi-asserted-by":"crossref","first-page":"28","DOI":"10.1109\/MMUL.2022.3213004","article-title":"CADW: CGAN-Based Attack on deep robust image watermarking","volume":"30","author":"Qin","year":"2023","journal-title":"IEEE MultiMed."},{"key":"10.1016\/j.inffus.2026.104487_bib0016","doi-asserted-by":"crossref","first-page":"7687","DOI":"10.1109\/TMM.2024.3370380","article-title":"Two-Stage watermark removal framework for spread spectrum watermarking","volume":"26","author":"You","year":"2024","journal-title":"IEEE Trans. Multimed."},{"key":"10.1016\/j.inffus.2026.104487_bib0017","first-page":"1","article-title":"Universal and quality-Preserving watermark removal based on unpaired learning","author":"Yan","year":"2025","journal-title":"IEEE Trans. Dependable Secure Comput."},{"issue":"8","key":"10.1016\/j.inffus.2026.104487_bib0018","doi-asserted-by":"crossref","first-page":"7566","DOI":"10.1109\/TCSVT.2024.3375831","article-title":"A self-Supervised CNN for image watermark removal","volume":"34","author":"Tian","year":"2024","journal-title":"IEEE Trans. Circuits Syst. Video Technol."},{"key":"10.1016\/j.inffus.2026.104487_bib0019","series-title":"2025 IEEE Symposium on Security and Privacy (SP)","first-page":"2602","article-title":"Unmarker: a universal attack on defensive image watermarking","author":"Kassis","year":"2025"},{"key":"10.1016\/j.inffus.2026.104487_bib0020","series-title":"Advances in Neural Information Processing Systems","first-page":"8643","article-title":"Invisible image watermarks are provably removable using generative AI","volume":"37","author":"Zhao","year":"2024"},{"key":"10.1016\/j.inffus.2026.104487_bib0021","series-title":"Companion Proceedings of the ACM on Web Conference 2025","first-page":"849","article-title":"Saliency-Aware diffusion reconstruction for effective invisible watermark removal","author":"Alam","year":"2025"},{"key":"10.1016\/j.inffus.2026.104487_bib0022","doi-asserted-by":"crossref","first-page":"1866","DOI":"10.1109\/TIFS.2025.3536299","article-title":"Imprints: mitigating watermark removal attacks with defensive watermarks","volume":"20","author":"Chen","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.inffus.2026.104487_bib0023","article-title":"Explaining and harnessing adversarial examples","volume":"abs\/1412.6572","author":"Goodfellow","year":"2014","journal-title":"Corr"},{"key":"10.1016\/j.inffus.2026.104487_bib0024","unstructured":"A. Madry, A. Makelov, L. Schmidt, D. Tsipras, A. Vladu, Towards Deep Learning Models Resistant to Adversarial Attacks, arXiv: 1706.06083, 2019."},{"key":"10.1016\/j.inffus.2026.104487_bib0025","series-title":"2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"2574","article-title":"Deepfool: a simple and accurate method to fool deep neural networks","author":"Moosavi-Dezfooli","year":"2016"},{"key":"10.1016\/j.inffus.2026.104487_bib0026","doi-asserted-by":"crossref","DOI":"10.1016\/j.inffus.2025.103864","article-title":"GMM: Efficient information-containing adversarial perturbation based on gradient masking method","volume":"127","author":"Lin","year":"2026","journal-title":"Inf. Fusion"},{"key":"10.1016\/j.inffus.2026.104487_bib0027","series-title":"2020 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"11531","article-title":"ECA-Net: Efficient channel attention for deep convolutional neural networks","author":"Wang","year":"2020"},{"key":"10.1016\/j.inffus.2026.104487_bib0028","series-title":"Proceedings of the European Conference on Computer Vision (ECCV)","first-page":"740","article-title":"Microsoft coco: common objects in context","author":"Lin","year":"2014"},{"key":"10.1016\/j.inffus.2026.104487_bib0029","series-title":"2009 IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"248","article-title":"Imagenet: a large-scale hierarchical image database","author":"Deng","year":"2009"},{"key":"10.1016\/j.inffus.2026.104487_bib0030","series-title":"Proceedings of the IEEE International Conference on Computer Vision (ICCV)","first-page":"3730","article-title":"Deep learning face attributes in the wild","author":"Liu","year":"2015"},{"key":"10.1016\/j.inffus.2026.104487_bib0031","series-title":"2017 IEEE Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"5122","article-title":"Scene parsing through ADE20k dataset","author":"Zhou","year":"2017"},{"key":"10.1016\/j.inffus.2026.104487_bib0032","series-title":"2018 IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"586","article-title":"The unreasonable effectiveness of deep features as a perceptual metric","author":"Zhang","year":"2018"},{"key":"10.1016\/j.inffus.2026.104487_bib0033","series-title":"Advances in Neural Information Processing Systems","article-title":"Imagenet classification with deep convolutional neural networks","volume":"25","author":"Krizhevsky","year":"2012"},{"key":"10.1016\/j.inffus.2026.104487_bib0034","series-title":"2022 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"10674","article-title":"High-resolution image synthesis with latent diffusion models","author":"Rombach","year":"2022"},{"key":"10.1016\/j.inffus.2026.104487_bib0035","series-title":"2020 IEEE\/CVF Conference on Computer Vision and Pattern Recognition (CVPR)","first-page":"7936","article-title":"Learned image compression with discretized gaussian mixture likelihoods and attention modules","author":"Cheng","year":"2020"},{"key":"10.1016\/j.inffus.2026.104487_bib0036","series-title":"2008 3rd International Conference on Communication Systems Software and Middleware and Workshops (COMSWARE \u201908)","first-page":"271","article-title":"DWT-DCT-SVD Based watermarking","author":"Navas","year":"2008"},{"key":"10.1016\/j.inffus.2026.104487_bib0037","series-title":"Proceedings of the European Conference on Computer Vision (ECCV)","first-page":"657","article-title":"Hidden: hiding data with deep networks","author":"Zhu","year":"2018"}],"container-title":["Information Fusion"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1566253526003660?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1566253526003660?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T08:33:08Z","timestamp":1783067588000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1566253526003660"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,11]]},"references-count":37,"alternative-id":["S1566253526003660"],"URL":"https:\/\/doi.org\/10.1016\/j.inffus.2026.104487","relation":{},"ISSN":["1566-2535"],"issn-type":[{"value":"1566-2535","type":"print"}],"subject":[],"published":{"date-parts":[[2026,11]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"INNA: An invertible neural network-based attack framework for robust image watermarking","name":"articletitle","label":"Article Title"},{"value":"Information Fusion","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.inffus.2026.104487","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"104487"}}