{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,20]],"date-time":"2026-05-20T17:38:38Z","timestamp":1779298718210,"version":"3.51.4"},"reference-count":52,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100013139","name":"Humanities and Social Science Fund of Ministry of Education of the People&apos;s Republic of China","doi-asserted-by":"publisher","award":["25YJA880044"],"award-info":[{"award-number":["25YJA880044"]}],"id":[{"id":"10.13039\/501100013139","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002338","name":"Ministry of Education of the People&apos;s Republic of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100002338","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Journal of Information Security and Applications"],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1016\/j.jisa.2026.104453","type":"journal-article","created":{"date-parts":[[2026,4,2]],"date-time":"2026-04-02T13:45:08Z","timestamp":1775137508000},"page":"104453","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":1,"special_numbering":"C","title":["AISM: Adversarial image steganography model for defending unauthorized recognition"],"prefix":"10.1016","volume":"99","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-7734-4826","authenticated-orcid":false,"given":"Zhuxian","family":"Liu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yunyu","family":"Kang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-3427-9255","authenticated-orcid":false,"given":"Xiaolong","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/j.jisa.2026.104453_bib0001","series-title":"Proceedings of the AAAI conference on artificial intelligence","first-page":"4652","article-title":"U-kan makes strong backbone for medical image segmentation and generation","volume":"vol. 39","author":"Li","year":"2025"},{"key":"10.1016\/j.jisa.2026.104453_bib0002","article-title":"A lightweight intrusion detection system for connected autonomous vehicles based on ECANet and image encoding","volume":"92","author":"Xia","year":"2025","journal-title":"J Inf Secur Appl"},{"key":"10.1016\/j.jisa.2026.104453_bib0003","article-title":"CSA: Crafting adversarial examples via content and style attacks","volume":"89","author":"Chen","year":"2025","journal-title":"J Inf Secur Appl"},{"key":"10.1016\/j.jisa.2026.104453_bib0004","doi-asserted-by":"crossref","first-page":"1496","DOI":"10.1109\/TIFS.2023.3337717","article-title":"Efficient image classification via structured low-rank matrix factorization regression","volume":"19","author":"Zhang","year":"2024","journal-title":"IEEE Trans Inf Forensics Secur"},{"key":"10.1016\/j.jisa.2026.104453_bib0005","unstructured":"Goodfellow I.J., Shlens J., Szegedy C.. 2015Explaining and harnessing adversarial examples. arXiv preprint arXiv: 1412.6572."},{"key":"10.1016\/j.jisa.2026.104453_bib0006","series-title":"Artificial intelligence safety and security","first-page":"99","article-title":"Adversarial examples in the physical world","author":"Kurakin","year":"2018"},{"key":"10.1016\/j.jisa.2026.104453_bib0007","unstructured":"Madry A.. Towards deep learning models resistant to adversarial attacks. 2017arXiv preprint arXiv: 1706.06083."},{"key":"10.1016\/j.jisa.2026.104453_bib0008","series-title":"Proceedings of the IEEE conference on computer vision and pattern recognition (CVPR)","article-title":"Boosting adversarial attacks with momentum","author":"Dong","year":"2018"},{"key":"10.1016\/j.jisa.2026.104453_bib0009","unstructured":"Brendel W., Rauber J., Bethge M.. Decision-based adversarial attacks: Reliable attacks against black-box machine learning models. 2017arXiv preprint arXiv: 1712.04248."},{"key":"10.1016\/j.jisa.2026.104453_bib0010","series-title":"Proceedings of the 10th ACM workshop on artificial intelligence and security","first-page":"15","article-title":"Zoo: zeroth order optimization based black-box attacks to deep neural networks without training substitute models","author":"Chen","year":"2017"},{"key":"10.1016\/j.jisa.2026.104453_bib0011","unstructured":"Schott L., Rauber J., Bethge M., Brendel W.. Towards the first adversarially robust neural network model on MNIST. 2018arXiv preprint arXiv: 1805.09190."},{"key":"10.1016\/j.jisa.2026.104453_bib0012","doi-asserted-by":"crossref","unstructured":"Xiao C., Li B., Zhu J.-Y., He W., Liu M., Song D.. Generating adversarial examples with adversarial networks. 2018arXiv preprint arXiv: 1801.02610.","DOI":"10.24963\/ijcai.2018\/543"},{"key":"10.1016\/j.jisa.2026.104453_bib0013","series-title":"International conference on machine learning","first-page":"1802","article-title":"Exploring the landscape of spatial robustness","author":"Engstrom","year":"2019"},{"key":"10.1016\/j.jisa.2026.104453_bib0014","series-title":"2020 IEEE symposium on security and privacy (sp)","first-page":"1277","article-title":"Hopskipjumpattack: a query-efficient decision-based attack","author":"Chen","year":"2020"},{"key":"10.1016\/j.jisa.2026.104453_bib0015","doi-asserted-by":"crossref","first-page":"3164","DOI":"10.1109\/TIFS.2024.3359441","article-title":"Perception-driven imperceptible adversarial attack against decision-based black-box models","volume":"19","author":"Zhang","year":"2024","journal-title":"IEEE Trans Inf Forensics Secur"},{"key":"10.1016\/j.jisa.2026.104453_bib0016","doi-asserted-by":"crossref","first-page":"4296","DOI":"10.1109\/TMM.2022.3173533","article-title":"A transferable adversarial belief attack with salient region perturbation restriction","volume":"25","author":"Zhang","year":"2023","journal-title":"IEEE Trans Multim"},{"key":"10.1016\/j.jisa.2026.104453_bib0017","doi-asserted-by":"crossref","first-page":"5286","DOI":"10.1109\/TIFS.2024.3393745","article-title":"Foolmix: strengthen the transferability of adversarial examples by dual-blending and direction update strategy","volume":"19","author":"Li","year":"2024","journal-title":"IEEE Trans Inf Forensics Secur"},{"issue":"6","key":"10.1016\/j.jisa.2026.104453_bib0018","first-page":"897","article-title":"Analysis of video steganography in military applications on cloud","volume":"19","author":"Ramamoorthy","year":"2022","journal-title":"Int Arab J Inf Technol"},{"key":"10.1016\/j.jisa.2026.104453_bib0019","doi-asserted-by":"crossref","DOI":"10.1016\/j.sigpro.2024.109546","article-title":"Medical steganography: enhanced security and image quality, and new S-Q assessment","volume":"223","author":"Peng","year":"2024","journal-title":"Signal Process"},{"key":"10.1016\/j.jisa.2026.104453_bib0020","series-title":"53rd hawaii international conference on system sciences","doi-asserted-by":"crossref","first-page":"1","DOI":"10.24251\/HICSS.2020.791","article-title":"Knock! knock! who is there? Investigating data leakage from a medical internet of things hijacking attack","author":"Flynn","year":"2020"},{"key":"10.1016\/j.jisa.2026.104453_bib0021","series-title":"2021\u202fIEEE\/ACM 21st international symposium on cluster, cloud and internet computing (CCGrid)","first-page":"344","article-title":"Efficient DLP-visor: an efficient hypervisor-based DLP","author":"Kiperberg","year":"2021"},{"key":"10.1016\/j.jisa.2026.104453_bib0022","series-title":"2017 IEEE symposium on security and privacy (sp)","first-page":"39","article-title":"Towards evaluating the robustness of neural networks","author":"Carlini","year":"2017"},{"key":"10.1016\/j.jisa.2026.104453_bib0023","article-title":"Hiding images in plain sight: deep steganography","volume":"30","author":"Baluja","year":"2017","journal-title":"Adv Neural Inf Process Syst"},{"key":"10.1016\/j.jisa.2026.104453_bib0024","unstructured":"Zhu J.. HiDDen: hiding data with deep networks. 2018arXiv preprint arXiv: 1807.09937."},{"key":"10.1016\/j.jisa.2026.104453_bib0025","series-title":"Proceedings of the 2018 2nd international conference on computer science and artificial intelligence","first-page":"441","article-title":"Digital cardan grille: a modern approach for information hiding","author":"Liu","year":"2018"},{"key":"10.1016\/j.jisa.2026.104453_bib0026","unstructured":"Zhang K.A., Cuesta-Infante A., Xu L., Veeramachaneni K.. SteganoGAN: High capacity image steganography with GANs. 2019arXiv preprint arXiv: 1901.03892."},{"key":"10.1016\/j.jisa.2026.104453_bib0027","doi-asserted-by":"crossref","first-page":"2751","DOI":"10.1109\/TIFS.2023.3268843","article-title":"Generative steganography via auto-generation of semantic object contours","volume":"18","author":"Zhou","year":"2023","journal-title":"IEEE Trans Inf Forensics Secur"},{"issue":"2","key":"10.1016\/j.jisa.2026.104453_bib0028","doi-asserted-by":"crossref","first-page":"301","DOI":"10.1109\/TC.2021.3065172","article-title":"FAWA: Fast adversarial watermark attack","volume":"73","author":"Jiang","year":"2024","journal-title":"IEEE Trans Computers"},{"key":"10.1016\/j.jisa.2026.104453_bib0029","series-title":"Proceedings of the 28th ACM international conference on multimedia","first-page":"1579","article-title":"Adv-watermark: a novel watermark perturbation for adversarial examples","author":"Jia","year":"2020"},{"key":"10.1016\/j.jisa.2026.104453_bib0030","series-title":"Proceedings of the IEEE\/CVF winter conference on applications of computer vision","first-page":"3685","article-title":"Wdnet: watermark-decomposition network for visible watermark removal","author":"Liu","year":"2021"},{"key":"10.1016\/j.jisa.2026.104453_bib0031","doi-asserted-by":"crossref","DOI":"10.1016\/j.ins.2023.119037","article-title":"BHI: Embedded invisible watermark as adversarial example based on basin-hopping improvement","volume":"640","author":"Liang","year":"2023","journal-title":"Inf Sci"},{"key":"10.1016\/j.jisa.2026.104453_bib0032","article-title":"Invisible adversarial watermarking: a novel security mechanism for enhancing copyright protection","author":"Wang","year":"2024","journal-title":"ACM Trans Multimedia Comput Commun Appl"},{"key":"10.1016\/j.jisa.2026.104453_bib0033","unstructured":"Dosovitskiy A.. An image is worth 16x16 words: Transformers for image recognition at scale. 2020arXiv preprint arXiv: 2010.11929."},{"key":"10.1016\/j.jisa.2026.104453_bib0034","series-title":"European conference on computer vision","first-page":"213","article-title":"End-to-end object detection with transformers","author":"Carion","year":"2020"},{"key":"10.1016\/j.jisa.2026.104453_bib0035","series-title":"Proceedings of the 36th international conference on machine learning","first-page":"2484","article-title":"Simple black-box adversarial attacks","volume":"vol. 97","author":"Guo","year":"2019"},{"key":"10.1016\/j.jisa.2026.104453_bib0036","unstructured":"Simonyan K., Zisserman A.. Very deep convolutional networks for large-scale image recognition. 2014arXiv preprint arXiv: 1409.1556."},{"key":"10.1016\/j.jisa.2026.104453_bib0037","series-title":"Proceedings of the IEEE conference on computer vision and pattern recognition (CVPR)","article-title":"Rethinking the inception architecture for computer vision","author":"Szegedy","year":"2016"},{"key":"10.1016\/j.jisa.2026.104453_bib0038","unstructured":"Iandola F.N.. Squeezenet: Alexnet-level accuracy with 50x fewer parameters and< 0.5\u202fMB model size. 2016arXiv preprint arXiv: 1602.07360."},{"key":"10.1016\/j.jisa.2026.104453_bib0039","series-title":"Proceedings of the IEEE conference on computer vision and pattern recognition (CVPR)","article-title":"Deep residual learning for image recognition","author":"He","year":"2016"},{"issue":"3","key":"10.1016\/j.jisa.2026.104453_bib0040","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1007\/s11263-015-0816-y","article-title":"Imagenet large scale visual recognition challenge","volume":"115","author":"Russakovsky","year":"2015","journal-title":"Int J Comput Vis"},{"key":"10.1016\/j.jisa.2026.104453_bib0041","series-title":"Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (CVPR)","first-page":"10684","article-title":"High-resolution image synthesis with latent diffusion models","author":"Rombach","year":"2022"},{"issue":"1","key":"10.1016\/j.jisa.2026.104453_bib0042","doi-asserted-by":"crossref","first-page":"72","DOI":"10.1109\/TDSC.2018.2874243","article-title":"Detecting adversarial image examples in deep neural networks with adaptive noise reduction","volume":"18","author":"Liang","year":"2021","journal-title":"IEEE Trans Dependable Secur Comput"},{"key":"10.1016\/j.jisa.2026.104453_bib0043","article-title":"Countering adversarial images using input transformations","volume":"abs\/1711.00117","author":"Guo","year":"2017","journal-title":"CoRR"},{"key":"10.1016\/j.jisa.2026.104453_bib0044","unstructured":"Xie C., Wang J., Zhang Z., Ren Z., Yuille A.. Mitigating adversarial effects through randomization. 2017arXiv preprint arXiv: 1711.01991."},{"key":"10.1016\/j.jisa.2026.104453_bib0045","series-title":"Advances in neural information processing systems","first-page":"21945","article-title":"Denoised smoothing: a provable defense for pretrained classifiers","volume":"vol. 33","author":"Salman","year":"2020"},{"key":"10.1016\/j.jisa.2026.104453_bib0046","series-title":"Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (CVPR)","article-title":"Adversarial defense by stratified convolutional sparse coding","author":"Sun","year":"2019"},{"key":"10.1016\/j.jisa.2026.104453_bib0047","doi-asserted-by":"crossref","first-page":"8381","DOI":"10.1109\/TMM.2025.3607779","article-title":"Screenguard: a screen-targeted watermarking scheme against arbitrary screenshot","volume":"27","author":"Liu","year":"2025","journal-title":"IEEE Trans Multim"},{"key":"10.1016\/j.jisa.2026.104453_bib0048","doi-asserted-by":"crossref","first-page":"300","DOI":"10.1137\/0108018","article-title":"Polynomial codes over certain finite fields","volume":"8","author":"Reed","year":"1960","journal-title":"J Soc Industr Appl Math"},{"issue":"5","key":"10.1016\/j.jisa.2026.104453_bib0049","doi-asserted-by":"crossref","first-page":"1181","DOI":"10.1109\/TIFS.2018.2871749","article-title":"Deep residual network for steganalysis of digital images","volume":"14","author":"Boroumand","year":"2019","journal-title":"IEEE Trans Inf Forensics Secur"},{"issue":"5","key":"10.1016\/j.jisa.2026.104453_bib0050","doi-asserted-by":"crossref","first-page":"708","DOI":"10.1109\/LSP.2016.2548421","article-title":"Structural design of convolutional neural networks for steganalysis","volume":"23","author":"Xu","year":"2016","journal-title":"IEEE Signal Process Lett"},{"issue":"2","key":"10.1016\/j.jisa.2026.104453_bib0051","doi-asserted-by":"crossref","first-page":"336","DOI":"10.1007\/s11263-019-01228-7","article-title":"Grad-CAM: visual explanations from deep networks via gradient-based localization","volume":"128","author":"Selvaraju","year":"2020","journal-title":"Int J Comput Vis"},{"key":"10.1016\/j.jisa.2026.104453_bib0052","series-title":"Tech. Rep.","article-title":"Caltech-256 object category dataset","author":"Griffin","year":"2007"}],"container-title":["Journal of Information Security and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2214212626000839?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2214212626000839?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T15:45:51Z","timestamp":1778859951000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2214212626000839"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":52,"alternative-id":["S2214212626000839"],"URL":"https:\/\/doi.org\/10.1016\/j.jisa.2026.104453","relation":{},"ISSN":["2214-2126"],"issn-type":[{"value":"2214-2126","type":"print"}],"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"AISM: Adversarial image steganography model for defending unauthorized recognition","name":"articletitle","label":"Article Title"},{"value":"Journal of Information Security and Applications","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.jisa.2026.104453","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"104453"}}